PT-2017-16267 · Google+8 · Google Chrome+8
Published
2017-03-09
·
Updated
2026-03-13
·
CVE-2017-5029
CVSS v3.1
8.8
High
| Vector | AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
libxslt version 1.1.29
Google Chrome versions prior to 57.0.2987.98 for Mac, Windows, and Linux
Google Chrome version prior to 57.0.2987.108 for Android
Nokogiri versions prior to 1.7.2
Description
The issue is related to the
xsltAddTextString function in transform.c in libxslt, which lacks a check for integer overflow during a size calculation. This allows a remote attacker to perform an out of bounds memory write via a crafted HTML page.Recommendations
For libxslt version 1.1.29, consider updating to a newer version that includes a fix for the integer overflow issue in the
xsltAddTextString function.
For Google Chrome versions prior to 57.0.2987.98 for Mac, Windows, and Linux, update to version 57.0.2987.98 or later.
For Google Chrome version prior to 57.0.2987.108 for Android, update to version 57.0.2987.108 or later.
For Nokogiri versions prior to 1.7.2, update to version 1.7.2 or later.
As a temporary workaround, consider restricting the use of the xsltAddTextString function in libxslt until a patch is available.Exploit
Fix
Memory Corruption
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Alt Linux
Google Chrome
Nokogiri
Opera
Red Hat
Suse
Ubuntu
Itunes
Libxslt