CVE-2008-2935
Fixed in a distro release EPSS 13%
Multiple heap-based buffer overflows in the rc4 (1) encryption (aka exsltCryptoRc4EncryptFunction) and (2) decryption (aka exsltCryptoRc4DecryptFunction) functions in crypto.c in libexslt in libxslt 1.1.8 through 1.1.24 allow context-dependent attackers to execute arbitrary code via an XML file containing a long string as "an argument in the XSL input."
Products: xmlsoft libxslt
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | libxslt | 1.1.24-2 |
| Debian 13 | libxslt | 1.1.24-2 |
| Debian 14 | libxslt | 1.1.24-2 |
| Debian 4.0 | libxslt | 1.1.19-3 |
| Debian 5.0 | libxslt | 1.1.24-1+lenny1 |
| Red Hat Enterprise Linux 4 | libxslt | 0:1.1.11-1.el4_7.2 |
| Red Hat Enterprise Linux 4 | libxslt-debuginfo | 0:1.1.11-1.el4_7.2 |
| Red Hat Enterprise Linux 4 | libxslt-devel | 0:1.1.11-1.el4_7.2 |
| Red Hat Enterprise Linux 4 | libxslt-python | 0:1.1.11-1.el4_7.2 |
| Red Hat Enterprise Linux 5 | libxslt | 0:1.1.17-2.el5_2.2 |
| Red Hat Enterprise Linux 5 | libxslt-debuginfo | 0:1.1.17-2.el5_2.2 |
| Red Hat Enterprise Linux 5 | libxslt-devel | 0:1.1.17-2.el5_2.2 |
| Red Hat Enterprise Linux 5 | libxslt-python | 0:1.1.17-2.el5_2.2 |