NetSight
IP …
medium5.0

CVE-2012-6139

libxslt before 1.1.28 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via an (1) empty match attribute in a XSL key t…

Impact

libxslt before 1.1.28 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via an (1) empty match attribute in a XSL key to the xsltAddKey function in keys.c or (2) uninitialized variable to the xsltDocumentFunction function in functions.c.

Affected products

VendorProductAffected versions
XmlsoftLibxslt
through 1.1.27
Versions 0.0.1, 0.1.0, 0.2.0, 0.3.0, 0.4.0
OpensuseOpensuse
Versions 11.4, 12.1, 12.2, 12.3

References