NetSight
IP …
medium4.3

CVE-2012-2870

libxslt 1.1.26 and earlier, as used in Google Chrome before 21.0.1180.89, does not properly manage memory, which might allow remote attackers to cause a denial…

Impact

libxslt 1.1.26 and earlier, as used in Google Chrome before 21.0.1180.89, does not properly manage memory, which might allow remote attackers to cause a denial of service (application crash) via a crafted XSLT expression that is not properly identified during XPath navigation, related to (1) the xsltCompileLocationPathPattern function in libxslt/pattern.c and (2) the xsltGenerateIdFunction function in libxslt/functions.c.

Affected products

VendorProductAffected versions
AppleIphone Os
through 6.1.4
Versions 1.0.0, 1.0.1, 1.0.2, 1.1.0, 1.1.1
GoogleChrome
through 21.0.1180.88
Versions 21.0.1180.0, 21.0.1180.1, 21.0.1180.2, 21.0.1180.31, 21.0.1180.32
XmlsoftLibxslt
through 1.1.26
Versions 1.1.8, 1.1.9, 1.1.10, 1.1.11, 1.1.12

Weakness classification

CWE-399

References