CVE-2012-2870
31.08.2012, 19:55
libxslt 1.1.26 and earlier, as used in Google Chrome before 21.0.1180.89, does not properly manage memory, which might allow remote attackers to cause a denial of service (application crash) via a crafted XSLT expression that is not properly identified during XPath navigation, related to (1) the xsltCompileLocationPathPattern function in libxslt/pattern.c and (2) the xsltGenerateIdFunction function in libxslt/functions.c.Enginsight
| Vendor | Product | Version |
|---|---|---|
| apple | iphone_os | 𝑥 ≤ 6.1.4 |
| apple | iphone_os | 1.0.0 |
| apple | iphone_os | 1.0.1 |
| apple | iphone_os | 1.0.2 |
| apple | iphone_os | 1.1.0 |
| apple | iphone_os | 1.1.1 |
| apple | iphone_os | 1.1.2 |
| apple | iphone_os | 1.1.3 |
| apple | iphone_os | 1.1.4 |
| apple | iphone_os | 1.1.5 |
| apple | iphone_os | 2.0 |
| apple | iphone_os | 2.0.0 |
| apple | iphone_os | 2.0.1 |
| apple | iphone_os | 2.0.2 |
| apple | iphone_os | 2.1 |
| apple | iphone_os | 2.1.1 |
| apple | iphone_os | 2.2 |
| apple | iphone_os | 2.2.1 |
| apple | iphone_os | 3.0 |
| apple | iphone_os | 3.0.1 |
| apple | iphone_os | 3.1 |
| apple | iphone_os | 3.1.2 |
| apple | iphone_os | 3.1.3 |
| apple | iphone_os | 3.2 |
| apple | iphone_os | 3.2.1 |
| apple | iphone_os | 3.2.2 |
| apple | iphone_os | 4.0 |
| apple | iphone_os | 4.0.1 |
| apple | iphone_os | 4.0.2 |
| apple | iphone_os | 4.1 |
| apple | iphone_os | 4.2.1 |
| apple | iphone_os | 4.2.5 |
| apple | iphone_os | 4.2.8 |
| apple | iphone_os | 4.3.0 |
| apple | iphone_os | 4.3.1 |
| apple | iphone_os | 4.3.2 |
| apple | iphone_os | 4.3.3 |
| apple | iphone_os | 4.3.5 |
| apple | iphone_os | 5.0 |
| apple | iphone_os | 5.0.1 |
| apple | iphone_os | 5.1 |
| apple | iphone_os | 5.1.1 |
| apple | iphone_os | 6.0 |
| apple | iphone_os | 6.0.1 |
| apple | iphone_os | 6.0.2 |
| apple | iphone_os | 6.1 |
| apple | iphone_os | 6.1.2 |
| apple | iphone_os | 6.1.3 |
| chrome | 𝑥 ≤ 21.0.1180.88 | |
| chrome | 21.0.1180.0 | |
| chrome | 21.0.1180.1 | |
| chrome | 21.0.1180.2 | |
| chrome | 21.0.1180.31 | |
| chrome | 21.0.1180.32 | |
| chrome | 21.0.1180.33 | |
| chrome | 21.0.1180.34 | |
| chrome | 21.0.1180.35 | |
| chrome | 21.0.1180.36 | |
| chrome | 21.0.1180.37 | |
| chrome | 21.0.1180.38 | |
| chrome | 21.0.1180.39 | |
| chrome | 21.0.1180.41 | |
| chrome | 21.0.1180.46 | |
| chrome | 21.0.1180.47 | |
| chrome | 21.0.1180.48 | |
| chrome | 21.0.1180.49 | |
| chrome | 21.0.1180.50 | |
| chrome | 21.0.1180.51 | |
| chrome | 21.0.1180.52 | |
| chrome | 21.0.1180.53 | |
| chrome | 21.0.1180.54 | |
| chrome | 21.0.1180.55 | |
| chrome | 21.0.1180.56 | |
| chrome | 21.0.1180.57 | |
| chrome | 21.0.1180.59 | |
| chrome | 21.0.1180.60 | |
| chrome | 21.0.1180.61 | |
| chrome | 21.0.1180.62 | |
| chrome | 21.0.1180.63 | |
| chrome | 21.0.1180.64 | |
| chrome | 21.0.1180.68 | |
| chrome | 21.0.1180.69 | |
| chrome | 21.0.1180.70 | |
| chrome | 21.0.1180.71 | |
| chrome | 21.0.1180.72 | |
| chrome | 21.0.1180.73 | |
| chrome | 21.0.1180.74 | |
| chrome | 21.0.1180.75 | |
| chrome | 21.0.1180.76 | |
| chrome | 21.0.1180.77 | |
| chrome | 21.0.1180.78 | |
| chrome | 21.0.1180.79 | |
| chrome | 21.0.1180.80 | |
| chrome | 21.0.1180.81 | |
| chrome | 21.0.1180.82 | |
| chrome | 21.0.1180.83 | |
| chrome | 21.0.1180.84 | |
| chrome | 21.0.1180.85 | |
| chrome | 21.0.1180.86 | |
| chrome | 21.0.1180.87 | |
| xmlsoft | libxslt | 𝑥 ≤ 1.1.26 |
| xmlsoft | libxslt | 1.1.8 |
| xmlsoft | libxslt | 1.1.9 |
| xmlsoft | libxslt | 1.1.10 |
| xmlsoft | libxslt | 1.1.11 |
| xmlsoft | libxslt | 1.1.12 |
| xmlsoft | libxslt | 1.1.13 |
| xmlsoft | libxslt | 1.1.14 |
| xmlsoft | libxslt | 1.1.15 |
| xmlsoft | libxslt | 1.1.16 |
| xmlsoft | libxslt | 1.1.17 |
| xmlsoft | libxslt | 1.1.18 |
| xmlsoft | libxslt | 1.1.19 |
| xmlsoft | libxslt | 1.1.20 |
| xmlsoft | libxslt | 1.1.21 |
| xmlsoft | libxslt | 1.1.22 |
| xmlsoft | libxslt | 1.1.23 |
| xmlsoft | libxslt | 1.1.24 |
𝑥
= Vulnerable software versions
Debian Releases
Ubuntu Releases
Ubuntu Product | |||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| chromium-browser |
| ||||||||||||
| libxslt |
|
Common Weakness Enumeration
References