CVE-2012-2871
Fixed in a distro release EPSS 2%
libxml2 2.9.0-rc1 and earlier, as used in Google Chrome before 21.0.1180.89, does not properly support a cast of an unspecified variable during handling of XSL transforms, which allows remote attackers to cause a denial of service or possibly have unknown other impact via a crafted document, related to the _xmlNs data structure in include/libxml/tree.h.
Products: apple iphone_os, google chrome, xmlsoft libxml2
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | libxslt | 1.1.26-14 |
| Debian 13 | libxslt | 1.1.26-14 |
| Debian 14 | libxslt | 1.1.26-14 |
| Debian 6.0 | libxslt | 1.1.26-6+squeeze2 |
| Red Hat Enterprise Linux 5 | libxslt | 0:1.1.17-4.el5_8.3 |
| Red Hat Enterprise Linux 5 | libxslt-debuginfo | 0:1.1.17-4.el5_8.3 |
| Red Hat Enterprise Linux 5 | libxslt-devel | 0:1.1.17-4.el5_8.3 |
| Red Hat Enterprise Linux 5 | libxslt-python | 0:1.1.17-4.el5_8.3 |
| Red Hat Enterprise Linux 6 | libxslt | 0:1.1.26-2.el6_3.1 |
| Red Hat Enterprise Linux 6 | libxslt-debuginfo | 0:1.1.26-2.el6_3.1 |
| Red Hat Enterprise Linux 6 | libxslt-devel | 0:1.1.26-2.el6_3.1 |
| Red Hat Enterprise Linux 6 | libxslt-python | 0:1.1.26-2.el6_3.1 |
| openSUSE Tumbleweed | chromium | 113.0.5672.92-1.1 |
| openSUSE Tumbleweed | chromium | 55.0.2883.75-3.1 |