CVE-2008-2935

Published: Aug 1, 2008Modified: Apr 23, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

Multiple heap-based buffer overflows in the rc4 (1) encryption (aka exsltCryptoRc4EncryptFunction) and (2) decryption (aka exsltCryptoRc4DecryptFunction) functions in crypto.c in libexslt in libxslt 1.1.8 through 1.1.24 allow context-dependent attackers to execute arbitrary code via an XML file containing a long string as "an argument in the XSL input."

Affected (17)

Products: Xmlsoft: Libxslt

1 product

Configuration A

17 vulnerable

Vulnerable Software	Affected Versions
Xmlsoft Libxslt	Version 1.1.10
Xmlsoft Libxslt	Version 1.1.11
Xmlsoft Libxslt	Version 1.1.12
Xmlsoft Libxslt	Version 1.1.13
Xmlsoft Libxslt	Version 1.1.14
Xmlsoft Libxslt	Version 1.1.15
Xmlsoft Libxslt	Version 1.1.16
Xmlsoft Libxslt	Version 1.1.17
Xmlsoft Libxslt	Version 1.1.18
Xmlsoft Libxslt	Version 1.1.19
Xmlsoft Libxslt	Version 1.1.20
Xmlsoft Libxslt	Version 1.1.21
Xmlsoft Libxslt	Version 1.1.22
Xmlsoft Libxslt	Version 1.1.23
Xmlsoft Libxslt	Version 1.1.24
Xmlsoft Libxslt	Version 1.1.8
Xmlsoft Libxslt	Version 1.1.9

Related CWEs

Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

References (54)

http://secunia.com/advisories/31230

Source: secalert@redhat.com

http://secunia.com/advisories/31310

Source: secalert@redhat.com

http://secunia.com/advisories/31331

Source: secalert@redhat.com

http://secunia.com/advisories/31363

Source: secalert@redhat.com

http://secunia.com/advisories/31395

Source: secalert@redhat.com

http://secunia.com/advisories/31399

Source: secalert@redhat.com

http://secunia.com/advisories/32453

Source: secalert@redhat.com

http://security.gentoo.org/glsa/glsa-200808-06.xml

Source: secalert@redhat.com

http://securityreason.com/securityalert/4078

Source: secalert@redhat.com

http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0306

Source: secalert@redhat.com

http://www.debian.org/security/2008/dsa-1624

Source: secalert@redhat.com

http://www.mandriva.com/security/advisories?name=MDVSA-2008:160

Source: secalert@redhat.com

http://www.ocert.org/advisories/ocert-2008-009.html

Source: secalert@redhat.com

Patch

http://www.ocert.org/patches/exslt_crypt.patch

Source: secalert@redhat.com

ExploitPatch

http://www.redhat.com/support/errata/RHSA-2008-0649.html

Source: secalert@redhat.com

http://www.scary.beasts.org/security/CESA-2008-003.html

Source: secalert@redhat.com

http://www.securityfocus.com/archive/1/494976/100/0/threaded

Source: secalert@redhat.com

http://www.securityfocus.com/archive/1/495018/100/0/threaded

Source: secalert@redhat.com

http://www.securityfocus.com/archive/1/497829/100/0/threaded

Source: secalert@redhat.com

http://www.securityfocus.com/bid/30467

Source: secalert@redhat.com

http://www.securitytracker.com/id?1020596

Source: secalert@redhat.com

http://www.ubuntu.com/usn/usn-633-1

Source: secalert@redhat.com

http://www.vupen.com/english/advisories/2008/2266/references

Source: secalert@redhat.com

https://exchange.xforce.ibmcloud.com/vulnerabilities/44141

Source: secalert@redhat.com

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10827

Source: secalert@redhat.com

https://www.redhat.com/archives/fedora-package-announce/2008-August/msg00092.html

Source: secalert@redhat.com

https://www.redhat.com/archives/fedora-package-announce/2008-August/msg00118.html

Source: secalert@redhat.com

http://secunia.com/advisories/31230

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/31310

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/31331

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/31363

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/31395

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/31399

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/32453

Source: af854a3a-2127-422b-91ae-364da2661108

http://security.gentoo.org/glsa/glsa-200808-06.xml

Source: af854a3a-2127-422b-91ae-364da2661108

http://securityreason.com/securityalert/4078

Source: af854a3a-2127-422b-91ae-364da2661108

http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0306

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.debian.org/security/2008/dsa-1624

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.mandriva.com/security/advisories?name=MDVSA-2008:160

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.ocert.org/advisories/ocert-2008-009.html

Source: af854a3a-2127-422b-91ae-364da2661108

Patch

http://www.ocert.org/patches/exslt_crypt.patch

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitPatch

http://www.redhat.com/support/errata/RHSA-2008-0649.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.scary.beasts.org/security/CESA-2008-003.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/archive/1/494976/100/0/threaded

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/archive/1/495018/100/0/threaded

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/archive/1/497829/100/0/threaded

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/30467

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securitytracker.com/id?1020596

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.ubuntu.com/usn/usn-633-1

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.vupen.com/english/advisories/2008/2266/references

Source: af854a3a-2127-422b-91ae-364da2661108

https://exchange.xforce.ibmcloud.com/vulnerabilities/44141

Source: af854a3a-2127-422b-91ae-364da2661108

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10827

Source: af854a3a-2127-422b-91ae-364da2661108

https://www.redhat.com/archives/fedora-package-announce/2008-August/msg00092.html

Source: af854a3a-2127-422b-91ae-364da2661108

https://www.redhat.com/archives/fedora-package-announce/2008-August/msg00118.html

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.