Skip to content

CVE-2012-2870 libxslt 1.1.26 and earlier, as used in Google Chrome before 21.0.1180.89, does not properly manage memory, which might allow remote attackers to cause a denial of service (application crash) via a cra...

MediumCVSS 4.3 EPSS 2.5%
Published
Updated
Exploit status
No public exploit known
Sign in for asset impact Search another CVE

Description

libxslt 1.1.26 and earlier, as used in Google Chrome before 21.0.1180.89, does not properly manage memory, which might allow remote attackers to cause a denial of service (application crash) via a crafted XSLT expression that is not properly identified during XPath navigation, related to (1) the xsltCompileLocationPathPattern function in libxslt/pattern.c and (2) the xsltGenerateIdFunction function in libxslt/functions.c.

Affected products

ProductAffected versionsFixed in
debian/libxslt(Debian:12) < 1.1.26-14 1.1.26-14
debian/libxslt(Debian:13) < 1.1.26-14 1.1.26-14
debian/libxslt(Debian:14) < 1.1.26-14 1.1.26-14
apple iphone os <= 6.1.4 No fix listed
apple iphone os = 1.0.0 No fix listed
apple iphone os = 1.0.1 No fix listed
apple iphone os = 1.0.2 No fix listed
apple iphone os = 1.1.0 No fix listed
apple iphone os = 1.1.1 No fix listed
apple iphone os = 1.1.2 No fix listed
apple iphone os = 1.1.3 No fix listed
apple iphone os = 1.1.4 No fix listed
apple iphone os = 1.1.5 No fix listed
apple iphone os = 2.0 No fix listed
apple iphone os = 2.0.0 No fix listed
apple iphone os = 2.0.1 No fix listed
apple iphone os = 2.0.2 No fix listed
apple iphone os = 2.1 No fix listed
apple iphone os = 2.1.1 No fix listed
apple iphone os = 2.2 No fix listed
apple iphone os = 2.2.1 No fix listed
apple iphone os = 3.0 No fix listed
apple iphone os = 3.0.1 No fix listed
apple iphone os = 3.1 No fix listed
apple iphone os = 3.1.2 No fix listed
Show 96 more
ProductAffected versionsFixed in
apple iphone os = 3.1.3 No fix listed
apple iphone os = 3.2 No fix listed
apple iphone os = 3.2.1 No fix listed
apple iphone os = 3.2.2 No fix listed
apple iphone os = 4.0 No fix listed
apple iphone os = 4.0.1 No fix listed
apple iphone os = 4.0.2 No fix listed
apple iphone os = 4.1 No fix listed
apple iphone os = 4.2.1 No fix listed
apple iphone os = 4.2.5 No fix listed
apple iphone os = 4.2.8 No fix listed
apple iphone os = 4.3.0 No fix listed
apple iphone os = 4.3.1 No fix listed
apple iphone os = 4.3.2 No fix listed
apple iphone os = 4.3.3 No fix listed
apple iphone os = 4.3.5 No fix listed
apple iphone os = 5.0 No fix listed
apple iphone os = 5.0.1 No fix listed
apple iphone os = 5.1 No fix listed
apple iphone os = 5.1.1 No fix listed
apple iphone os = 6.0 No fix listed
apple iphone os = 6.0.1 No fix listed
apple iphone os = 6.0.2 No fix listed
apple iphone os = 6.1 No fix listed
apple iphone os = 6.1.2 No fix listed
apple iphone os = 6.1.3 No fix listed
Google Chrome <= 21.0.1180.88 No fix listed
Google Chrome = 21.0.1180.0 No fix listed
Google Chrome = 21.0.1180.1 No fix listed
Google Chrome = 21.0.1180.2 No fix listed
Google Chrome = 21.0.1180.31 No fix listed
Google Chrome = 21.0.1180.32 No fix listed
Google Chrome = 21.0.1180.33 No fix listed
Google Chrome = 21.0.1180.34 No fix listed
Google Chrome = 21.0.1180.35 No fix listed
Google Chrome = 21.0.1180.36 No fix listed
Google Chrome = 21.0.1180.37 No fix listed
Google Chrome = 21.0.1180.38 No fix listed
Google Chrome = 21.0.1180.39 No fix listed
Google Chrome = 21.0.1180.41 No fix listed
Google Chrome = 21.0.1180.46 No fix listed
Google Chrome = 21.0.1180.47 No fix listed
Google Chrome = 21.0.1180.48 No fix listed
Google Chrome = 21.0.1180.49 No fix listed
Google Chrome = 21.0.1180.50 No fix listed
Google Chrome = 21.0.1180.51 No fix listed
Google Chrome = 21.0.1180.52 No fix listed
Google Chrome = 21.0.1180.53 No fix listed
Google Chrome = 21.0.1180.54 No fix listed
Google Chrome = 21.0.1180.55 No fix listed
Google Chrome = 21.0.1180.56 No fix listed
Google Chrome = 21.0.1180.57 No fix listed
Google Chrome = 21.0.1180.59 No fix listed
Google Chrome = 21.0.1180.60 No fix listed
Google Chrome = 21.0.1180.61 No fix listed
Google Chrome = 21.0.1180.62 No fix listed
Google Chrome = 21.0.1180.63 No fix listed
Google Chrome = 21.0.1180.64 No fix listed
Google Chrome = 21.0.1180.68 No fix listed
Google Chrome = 21.0.1180.69 No fix listed
Google Chrome = 21.0.1180.70 No fix listed
Google Chrome = 21.0.1180.71 No fix listed
Google Chrome = 21.0.1180.72 No fix listed
Google Chrome = 21.0.1180.73 No fix listed
Google Chrome = 21.0.1180.74 No fix listed
Google Chrome = 21.0.1180.75 No fix listed
Google Chrome = 21.0.1180.76 No fix listed
Google Chrome = 21.0.1180.77 No fix listed
Google Chrome = 21.0.1180.78 No fix listed
Google Chrome = 21.0.1180.79 No fix listed
Google Chrome = 21.0.1180.80 No fix listed
Google Chrome = 21.0.1180.81 No fix listed
Google Chrome = 21.0.1180.82 No fix listed
Google Chrome = 21.0.1180.83 No fix listed
Google Chrome = 21.0.1180.84 No fix listed
Google Chrome = 21.0.1180.85 No fix listed
Google Chrome = 21.0.1180.86 No fix listed
Google Chrome = 21.0.1180.87 No fix listed
xmlsoft libxslt <= 1.1.26 No fix listed
xmlsoft libxslt = 1.1.8 No fix listed
xmlsoft libxslt = 1.1.9 No fix listed
xmlsoft libxslt = 1.1.10 No fix listed
xmlsoft libxslt = 1.1.11 No fix listed
xmlsoft libxslt = 1.1.12 No fix listed
xmlsoft libxslt = 1.1.13 No fix listed
xmlsoft libxslt = 1.1.14 No fix listed
xmlsoft libxslt = 1.1.15 No fix listed
xmlsoft libxslt = 1.1.16 No fix listed
xmlsoft libxslt = 1.1.17 No fix listed
xmlsoft libxslt = 1.1.18 No fix listed
xmlsoft libxslt = 1.1.19 No fix listed
xmlsoft libxslt = 1.1.20 No fix listed
xmlsoft libxslt = 1.1.21 No fix listed
xmlsoft libxslt = 1.1.22 No fix listed
xmlsoft libxslt = 1.1.23 No fix listed
xmlsoft libxslt = 1.1.24 No fix listed

References