4.3

CVE-2013-4520

Exploit

xslt.c in libxslt before 1.1.25 allows context-dependent attackers to cause a denial of service (crash) via a stylesheet that embeds a DTD, which causes a structure to be accessed as a different type.  NOTE: this issue is due to an incomplete fix for CVE-2012-2825.

Data is provided by the National Vulnerability Database (NVD)
Xmlsoft ≫ Libxslt Version <= 1.1.24
Xmlsoft ≫ Libxslt Version0.0.1
Xmlsoft ≫ Libxslt Version0.1.0
Xmlsoft ≫ Libxslt Version0.2.0
Xmlsoft ≫ Libxslt Version0.3.0
Xmlsoft ≫ Libxslt Version0.4.0
Xmlsoft ≫ Libxslt Version0.5.0
Xmlsoft ≫ Libxslt Version0.6.0
Xmlsoft ≫ Libxslt Version0.7.0
Xmlsoft ≫ Libxslt Version0.8.0
Xmlsoft ≫ Libxslt Version0.9.0
Xmlsoft ≫ Libxslt Version0.10.0
Xmlsoft ≫ Libxslt Version0.11.0
Xmlsoft ≫ Libxslt Version0.12.0
Xmlsoft ≫ Libxslt Version0.13.0
Xmlsoft ≫ Libxslt Version0.14.0
Xmlsoft ≫ Libxslt Version1.0.0
Xmlsoft ≫ Libxslt Version1.0.1
Xmlsoft ≫ Libxslt Version1.0.2
Xmlsoft ≫ Libxslt Version1.0.3
Xmlsoft ≫ Libxslt Version1.0.4
Xmlsoft ≫ Libxslt Version1.0.5
Xmlsoft ≫ Libxslt Version1.0.6
Xmlsoft ≫ Libxslt Version1.0.7
Xmlsoft ≫ Libxslt Version1.0.8
Xmlsoft ≫ Libxslt Version1.0.9
Xmlsoft ≫ Libxslt Version1.0.10
Xmlsoft ≫ Libxslt Version1.0.11
Xmlsoft ≫ Libxslt Version1.0.12
Xmlsoft ≫ Libxslt Version1.0.13
Xmlsoft ≫ Libxslt Version1.0.14
Xmlsoft ≫ Libxslt Version1.0.15
Xmlsoft ≫ Libxslt Version1.0.16
Xmlsoft ≫ Libxslt Version1.0.17
Xmlsoft ≫ Libxslt Version1.0.18
Xmlsoft ≫ Libxslt Version1.0.19
Xmlsoft ≫ Libxslt Version1.0.20
Xmlsoft ≫ Libxslt Version1.0.21
Xmlsoft ≫ Libxslt Version1.0.22
Xmlsoft ≫ Libxslt Version1.0.23
Xmlsoft ≫ Libxslt Version1.0.24
Xmlsoft ≫ Libxslt Version1.0.25
Xmlsoft ≫ Libxslt Version1.0.26
Xmlsoft ≫ Libxslt Version1.0.27
Xmlsoft ≫ Libxslt Version1.0.28
Xmlsoft ≫ Libxslt Version1.0.29
Xmlsoft ≫ Libxslt Version1.0.30
Xmlsoft ≫ Libxslt Version1.0.31
Xmlsoft ≫ Libxslt Version1.0.32
Xmlsoft ≫ Libxslt Version1.0.33
Xmlsoft ≫ Libxslt Version1.1.0
Xmlsoft ≫ Libxslt Version1.1.1
Xmlsoft ≫ Libxslt Version1.1.2
Xmlsoft ≫ Libxslt Version1.1.3
Xmlsoft ≫ Libxslt Version1.1.4
Xmlsoft ≫ Libxslt Version1.1.5
Xmlsoft ≫ Libxslt Version1.1.6
Xmlsoft ≫ Libxslt Version1.1.7
Xmlsoft ≫ Libxslt Version1.1.8
Xmlsoft ≫ Libxslt Version1.1.9
Xmlsoft ≫ Libxslt Version1.1.10
Xmlsoft ≫ Libxslt Version1.1.11
Xmlsoft ≫ Libxslt Version1.1.12
Xmlsoft ≫ Libxslt Version1.1.13
Xmlsoft ≫ Libxslt Version1.1.14
Xmlsoft ≫ Libxslt Version1.1.15
Xmlsoft ≫ Libxslt Version1.1.16
Xmlsoft ≫ Libxslt Version1.1.17
Xmlsoft ≫ Libxslt Version1.1.18
Xmlsoft ≫ Libxslt Version1.1.19
Xmlsoft ≫ Libxslt Version1.1.20
Xmlsoft ≫ Libxslt Version1.1.21
Xmlsoft ≫ Libxslt Version1.1.22
Xmlsoft ≫ Libxslt Version1.1.23
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 1.43% 0.798
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 4.3 8.6 2.9
AV:N/AC:M/Au:N/C:N/I:N/A:P