CVE-2015-7995

Published: Nov 17, 2015Modified: May 6, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

The xsltStylePreCompute function in preproc.c in libxslt 1.1.28 does not check if the parent node is an element, which allows attackers to cause a denial of service via a crafted XML file, related to a "type confusion" issue.

Affected (5)

Products: Apple: Iphone Os, Mac Os X, Tvos, Watchos · Xmlsoft: Libxslt

4 products

1 product

Configuration A

4 vulnerable

Vulnerable Software	Affected Versions
Apple Iphone Os	Up to 9.2
Apple Mac Os X	Up to 10.11.2
Apple Tvos	Up to 9.1
Apple Watchos	Up to 2.1

Configuration B

1 vulnerable

Vulnerable Software	Affected Versions
Xmlsoft Libxslt	Up to 1.1.28

References (44)

http://lists.apple.com/archives/security-announce/2016/Jan/msg00002.html

Source: cve@mitre.org

Vendor Advisory

http://lists.apple.com/archives/security-announce/2016/Jan/msg00003.html

Source: cve@mitre.org

Vendor Advisory

http://lists.apple.com/archives/security-announce/2016/Jan/msg00005.html

Source: cve@mitre.org

Vendor Advisory

http://lists.apple.com/archives/security-announce/2016/Mar/msg00001.html

Source: cve@mitre.org

http://lists.opensuse.org/opensuse-updates/2016-05/msg00123.html

Source: cve@mitre.org

http://www.debian.org/security/2016/dsa-3605

Source: cve@mitre.org

http://www.openwall.com/lists/oss-security/2015/10/27/10

Source: cve@mitre.org

http://www.openwall.com/lists/oss-security/2015/10/28/4

Source: cve@mitre.org

http://www.oracle.com/technetwork/topics/security/bulletinjan2016-2867206.html

Source: cve@mitre.org

http://www.securityfocus.com/bid/77325

Source: cve@mitre.org

http://www.securitytracker.com/id/1034736

Source: cve@mitre.org

http://www.securitytracker.com/id/1038623

Source: cve@mitre.org

http://www.slackware.com/security/viewer.php?l=slackware-security&y=2016&m=slackware-security.386546

Source: cve@mitre.org

https://bugzilla.redhat.com/show_bug.cgi?id=1257962

Source: cve@mitre.org

Exploit

https://git.gnome.org/browse/libxslt/commit/?id=7ca19df892ca22d9314e95d59ce2abdeff46b617

Source: cve@mitre.org

https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05111017

Source: cve@mitre.org

https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05158380

Source: cve@mitre.org

https://puppet.com/security/cve/cve-2015-7995

Source: cve@mitre.org

https://support.apple.com/HT205729

Source: cve@mitre.org

https://support.apple.com/HT205731

Source: cve@mitre.org

https://support.apple.com/HT205732

Source: cve@mitre.org

https://support.apple.com/HT206168

Source: cve@mitre.org

Vendor Advisory

http://lists.apple.com/archives/security-announce/2016/Jan/msg00002.html