CVE-2012-6139

Severity

50%

Complexity

99%

Confidentiality

48%

Per: http://cwe.mitre.org/data/definitions/476.html 'CWE-476: NULL Pointer Dereference'

libxslt before 1.1.28 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via an (1) empty match attribute in a XSL key to the xsltAddKey function in keys.c or (2) uninitialized variable to the xsltDocumentFunction function in functions.c.

Per: http://cwe.mitre.org/data/definitions/476.html 'CWE-476: NULL Pointer Dereference'

CVSS 2.0 Base Score 5. CVSS Attack Vector: network. CVSS Attack Complexity: low. CVSS Vector: (AV:N/AC:L/Au:N/C:N/I:N/A:P).

Overview

First reported 11 years ago

2013-04-12 22:55:00

Last updated 6 years ago

2018-10-30 16:27:00

Affected Software

XMLSoft libxslt 0.0.1

0.0.1

XMLSoft libxslt 0.1.0

0.1.0

XMLSoft libxslt 0.2.0

0.2.0

XMLSoft libxslt 0.3.0

0.3.0

XMLSoft libxslt 0.4.0

0.4.0

XMLSoft libxslt 0.5.0

0.5.0

XMLSoft libxslt 0.6.0

0.6.0

XMLSoft libxslt 0.7.0

0.7.0

XMLSoft libxslt 0.8.0

0.8.0

XMLSoft libxslt 0.9.0

0.9.0

XMLSoft libxslt 0.10.0

0.10.0

XMLSoft libxslt 0.11.0

0.11.0

XMLSoft libxslt 0.12.0

0.12.0

XMLSoft libxslt 0.13.0

0.13.0

XMLSoft libxslt 0.14.0

0.14.0

XMLSoft libxslt 1.0.0

1.0.0

XMLSoft libxslt 1.0.1

1.0.1

XMLSoft libxslt 1.0.2

1.0.2

XMLSoft libxslt 1.0.3

1.0.3

XMLSoft libxslt 1.0.4

1.0.4

XMLSoft libxslt 1.0.5

1.0.5

XMLSoft libxslt 1.0.6

1.0.6

XMLSoft libxslt 1.0.7

1.0.7

XMLSoft libxslt 1.0.8

1.0.8

XMLSoft libxslt 1.0.9

1.0.9

XMLSoft libxslt 1.0.10

1.0.10

XMLSoft libxslt 1.0.11

1.0.11

XMLSoft libxslt 1.0.12

1.0.12

XMLSoft libxslt 1.0.13

1.0.13

XMLSoft libxslt 1.0.14

1.0.14

XMLSoft libxslt 1.0.15

1.0.15

XMLSoft libxslt 1.0.16

1.0.16

XMLSoft libxslt 1.0.17

1.0.17

XMLSoft libxslt 1.0.18

1.0.18

XMLSoft libxslt 1.0.19

1.0.19

XMLSoft libxslt 1.0.20

1.0.20

XMLSoft libxslt 1.0.21

1.0.21

XMLSoft libxslt 1.0.22

1.0.22

XMLSoft libxslt 1.0.23

1.0.23

XMLSoft libxslt 1.0.24

1.0.24

XMLSoft libxslt 1.0.25

1.0.25

XMLSoft libxslt 1.0.26

1.0.26

XMLSoft libxslt 1.0.27

1.0.27

XMLSoft libxslt 1.0.28

1.0.28

XMLSoft libxslt 1.0.29

1.0.29

XMLSoft libxslt 1.0.30

1.0.30

XMLSoft libxslt 1.0.31

1.0.31

XMLSoft libxslt 1.0.32

1.0.32

XMLSoft libxslt 1.0.33

1.0.33

XMLSoft libxslt 1.1.0

1.1.0

XMLSoft libxslt 1.1.1

1.1.1

XMLSoft libxslt 1.1.2

1.1.2

XMLSoft libxslt 1.1.3

1.1.3

XMLSoft libxslt 1.1.4

1.1.4

XMLSoft libxslt 1.1.5

1.1.5

XMLSoft libxslt 1.1.6

1.1.6

XMLSoft libxslt 1.1.7

1.1.7

XMLSoft libxslt 1.1.8

1.1.8

XMLSoft libxslt 1.1.9

1.1.9

XMLSoft libxslt 1.1.10

1.1.10

XMLSoft libxslt 1.1.11

1.1.11

XMLSoft libxslt 1.1.12

1.1.12

XMLSoft libxslt 1.1.13

1.1.13

XMLSoft libxslt 1.1.14

1.1.14

XMLSoft libxslt 1.1.15

1.1.15

XMLSoft libxslt 1.1.16

1.1.16

XMLSoft libxslt 1.1.17

1.1.17

XMLSoft libxslt 1.1.18

1.1.18

XMLSoft libxslt 1.1.19

1.1.19

XMLSoft libxslt 1.1.20

1.1.20

XMLSoft libxslt 1.1.21

1.1.21

XMLSoft libxslt 1.1.22

1.1.22

XMLSoft libxslt 1.1.23

1.1.23

XMLSoft libxslt 1.1.24

1.1.24

XMLSoft libxslt 1.1.25

1.1.25

XMLSoft libxslt 1.1.26

1.1.26

OpenSUSE 11.4

11.4

OpenSUSE 12.1

12.1

OpenSUSE 12.2

12.2

OpenSUSE 12.3

12.3

References

FEDORA-2013-4507

openSUSE-SU-2013:0585

openSUSE-SU-2013:0593

52745

Vendor Advisory

52805

Vendor Advisory

52813

Vendor Advisory

52884

Vendor Advisory

DSA-2654

MDVSA-2013:141

1028338

USN-1784-1

http://xmlsoft.org/XSLT/news.html

https://bugzilla.gnome.org/show_bug.cgi?id=685328

https://bugzilla.gnome.org/show_bug.cgi?id=685330

https://git.gnome.org/browse/libxslt/commit/?id=6c99c519d97e5fcbec7a9537d190efb442e4e833

https://git.gnome.org/browse/libxslt/commit/?id=dc11b6b379a882418093ecc8adf11f6166682e8d

https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0107

SUSE-SU-2013:1654

SUSE-SU-2013:1656

Stay updated

ExploitPedia is constantly evolving. Sign up to receive a notification when we release additional functionality.

Get in touch

If you'd like to report a bug or have any suggestions for improvements then please do get in touch with us using this form. We will get back to you as soon as we can.