PT-2012-1109 · Libxslt+4 · Libxslt+4

Published 2012-02-08 · Updated 2024-06-15 · CVE-2011-3970

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions libxslt versions prior to 1.1.26-r3 libxslt as used in Google Chrome versions prior to 17.0.963.46

Description The issue concerns multiple vulnerabilities in the libxslt package, which can be exploited remotely to cause a denial of service, potentially leading to disruption of protected information availability. The exploitation can be carried out via unspecified vectors, resulting in an out-of-bounds read.

Recommendations For libxslt versions prior to 1.1.26-r3, update to version 1.1.26-r3 or later to resolve the issue. For Google Chrome versions prior to 17.0.963.46, update to version 17.0.963.46 or later to address the vulnerability.

Exploit

Fix

DoS

Out of bounds Read

Weakness Enumeration

CWE-125

Related Identifiers

BDU:2015-09441

CESA-2012_1265

CVE-2011-3970

OPENSUSE-SU-2024:10171-1

OPENSUSE-SU-2024:12948-1

RHSA-2012:1265

RHSA-2012_1265

SUSE-SU-2012_0464-1

SUSE-SU-2012_0464-2

SUSE-SU-2013_1654-1

SUSE-SU-2013_1656-1

Affected Products

Centos

Google Chrome

Red Hat

Suse

Libxslt

References · 2393

• 🔥 http://code.google.com/p/chromium/issues/detail?id=110277 · Exploit
• https://bdu.fstec.ru/vul/2015-09441 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2011-3970 · Security Note
• https://osv.dev/vulnerability/openSUSE-SU-2024:10171-1 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2011-3970 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-3970 · Security Note
• https://bdu.fstec.ru/vul/2015-09713 · Security Note
• https://suse.com/support/update/announcement/2013/suse-su-20131654-1.html · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2893 · Security Note
• https://osv.dev/vulnerability/DEBIAN-CVE-2011-3970 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2825 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-6139 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1202 · Security Note
• https://osv.dev/vulnerability/openSUSE-SU-2024:12948-1 · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-02885 · Security Note