CVE-2011-1425 xslt.c in XML Security Library (aka xmlsec) before 1.2.17, as used in WebKit and other products, when XSLT is enabled, allows remote attackers to create or overwrite arbitrary files via vectors involv...
MediumCVSS 5.1
EPSS 8.1%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
xslt.c in XML Security Library (aka xmlsec) before 1.2.17, as used in WebKit and other products, when XSLT is enabled, allows remote attackers to create or overwrite arbitrary files via vectors involving the libxslt output extension and a ds:Transform element during signature verification.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| aleksey xml security library | <= 1.2.16 | No fix listed |
| aleksey xml security library | = 0.0.1 | No fix listed |
| aleksey xml security library | = 0.0.2 | No fix listed |
| aleksey xml security library | = 0.0.2a | No fix listed |
| aleksey xml security library | = 0.0.3 | No fix listed |
| aleksey xml security library | = 0.0.4 | No fix listed |
| aleksey xml security library | = 0.0.5 | No fix listed |
| aleksey xml security library | = 0.0.6 | No fix listed |
| aleksey xml security library | = 0.0.7 | No fix listed |
| aleksey xml security library | = 0.0.8 | No fix listed |
| aleksey xml security library | = 0.0.9 | No fix listed |
| aleksey xml security library | = 0.0.10 | No fix listed |
| aleksey xml security library | = 0.0.11 | No fix listed |
| aleksey xml security library | = 0.0.12 | No fix listed |
| aleksey xml security library | = 0.0.13 | No fix listed |
| aleksey xml security library | = 0.0.14 | No fix listed |
| aleksey xml security library | = 0.0.15 | No fix listed |
| aleksey xml security library | = 0.1.0 | No fix listed |
| aleksey xml security library | = 0.1.1 | No fix listed |
| aleksey xml security library | = 1.0.0 | No fix listed |
| aleksey xml security library | = 1.0.0-rc1 | No fix listed |
| aleksey xml security library | = 1.0.1 | No fix listed |
| aleksey xml security library | = 1.0.2 | No fix listed |
| aleksey xml security library | = 1.0.3 | No fix listed |
| aleksey xml security library | = 1.0.4 | No fix listed |
Show 22 more
| Product | Affected versions | Fixed in |
|---|---|---|
| aleksey xml security library | = 1.1.0 | No fix listed |
| aleksey xml security library | = 1.1.1 | No fix listed |
| aleksey xml security library | = 1.1.2 | No fix listed |
| aleksey xml security library | = 1.2.0 | No fix listed |
| aleksey xml security library | = 1.2.1 | No fix listed |
| aleksey xml security library | = 1.2.2 | No fix listed |
| aleksey xml security library | = 1.2.3 | No fix listed |
| aleksey xml security library | = 1.2.4 | No fix listed |
| aleksey xml security library | = 1.2.5 | No fix listed |
| aleksey xml security library | = 1.2.6 | No fix listed |
| aleksey xml security library | = 1.2.7 | No fix listed |
| aleksey xml security library | = 1.2.8 | No fix listed |
| aleksey xml security library | = 1.2.9 | No fix listed |
| aleksey xml security library | = 1.2.10 | No fix listed |
| aleksey xml security library | = 1.2.11 | No fix listed |
| aleksey xml security library | = 1.2.13 | No fix listed |
| aleksey xml security library | = 1.2.14 | No fix listed |
| aleksey xml security library | = 1.2.15 | No fix listed |
| apple webkit | All versions | No fix listed |
| debian/xmlsec1(Debian:12) | < 1.2.14-1.1 | 1.2.14-1.1 |
| debian/xmlsec1(Debian:13) | < 1.2.14-1.1 | 1.2.14-1.1 |
| debian/xmlsec1(Debian:14) | < 1.2.14-1.1 | 1.2.14-1.1 |
References
- git.gnome.org patch
- git.gnome.org patch
- 43920 third-party-advisory vendor-advisory
- 44167 third-party-advisory
- 44423 third-party-advisory
- trac.webkit.org
- [xmlsec] 20110331 New xmlsec 1.2.17 release mailing-list patch
- DSA-2219 vendor-advisory
- MDVSA-2011:063 vendor-advisory
- RHSA-2011:0486 vendor-advisory
- 47135 vdb-entry
- 1025284 vdb-entry
- ADV-2011-0855 vdb-entry
- ADV-2011-0858 vdb-entry
- ADV-2011-1010 vdb-entry
- ADV-2011-1172 vdb-entry
- bugs.webkit.org
- bugzilla.redhat.com patch
- xmlsecurity-xmlfiles-sec-bypass(66506) vdb-entry
- Debian Security Tracker CVE-2011-1425 vendor-advisory
- bugs.debian.org issue-tracking