Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2008-2935
HistoryAug 01, 2008 - 2:41 p.m.

CVE-2008-2935

2008-08-0114:41:00
CWE-119
[email protected]
web.nvd.nist.gov
7

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

7.3

Confidence

Low

EPSS

0.18

Percentile

96.2%

JSON

Multiple heap-based buffer overflows in the rc4 (1) encryption (aka exsltCryptoRc4EncryptFunction) and (2) decryption (aka exsltCryptoRc4DecryptFunction) functions in crypto.c in libexslt in libxslt 1.1.8 through 1.1.24 allow context-dependent attackers to execute arbitrary code via an XML file containing a long string as β€œan argument in the XSL input.”

Affected configurations

Nvd
Node
xmlsoftlibxsltMatch1.1.8
OR
xmlsoftlibxsltMatch1.1.9
OR
xmlsoftlibxsltMatch1.1.10
OR
xmlsoftlibxsltMatch1.1.11
OR
xmlsoftlibxsltMatch1.1.12
OR
xmlsoftlibxsltMatch1.1.13
OR
xmlsoftlibxsltMatch1.1.14
OR
xmlsoftlibxsltMatch1.1.15
OR
xmlsoftlibxsltMatch1.1.16
OR
xmlsoftlibxsltMatch1.1.17
OR
xmlsoftlibxsltMatch1.1.18
OR
xmlsoftlibxsltMatch1.1.19
OR
xmlsoftlibxsltMatch1.1.20
OR
xmlsoftlibxsltMatch1.1.21
OR
xmlsoftlibxsltMatch1.1.22
OR
xmlsoftlibxsltMatch1.1.23
OR
xmlsoftlibxsltMatch1.1.24

References

Related

openvas 17
nessus 13
checkpoint_advisories 1
prion 1
centos 1
seebug 1
securityvulns 2
cve 1
redhat 1
fedora 2
debian 1
debiancve 1
oraclelinux 1
ubuntucve 1
gentoo 1
cvelist 1
ubuntu 1
openvas
openvas
SLES10: Security update for libxslt
2009-10-13 00:00:00
Oracle: Security Advisory (ELSA-2008-0649)
2015-10-08 00:00:00
SLES10: Security update for libxslt
2009-10-13 00:00:00
nessus
nessus
openSUSE 10 Security Update : libxslt (libxslt-5458)
2008-09-03 00:00:00
Scientific Linux Security Update : libxslt on SL4.x, SL5.x i386/x86_64
2012-08-01 00:00:00
Fedora 9 : libxslt-1.1.24-2.fc9 (2008-7062)
2008-08-08 00:00:00
checkpoint_advisories
checkpoint_advisories
GNOME Project libxslt Library RC4 Key String Buffer Overflow (CVE-2008-2935)
2010-03-11 00:00:00
prion
prion
Heap overflow
2008-08-01 14:41:00
centos
centos
libxslt security update
2008-07-31 17:59:53
seebug
seebug
libxslt RC4εŠ ε―†/θ§£ε―†ε‡½ζ•°ε †ζΊ’ε‡ΊζΌζ΄ž
2008-08-03 00:00:00
securityvulns
securityvulns
[oCERT-2008-009] libxslt heap overflow
2008-08-01 00:00:00
libxslt multiple security vulnerabilities
2008-08-01 00:00:00
cve
cve
CVE-2008-2935
2008-08-01 14:41:00
redhat
redhat
(RHSA-2008:0649) Moderate: libxslt security update
2008-07-31 00:00:00
fedora
fedora
[SECURITY] Fedora 8 Update: libxslt-1.1.24-2.fc8
2008-08-07 23:51:46
[SECURITY] Fedora 9 Update: libxslt-1.1.24-2.fc9
2008-08-07 23:53:48
debian
debian
[SECURITY] [DSA 1624-1] New libxslt packages fix arbitrary code execution
2008-07-31 20:19:20
debiancve
debiancve
CVE-2008-2935
2008-08-01 14:41:00
oraclelinux
oraclelinux
libxslt security update
2008-07-31 00:00:00
ubuntucve
ubuntucve
CVE-2008-2935
2008-08-01 00:00:00
gentoo
gentoo
libxslt: Execution of arbitrary code
2008-08-06 00:00:00
cvelist
cvelist
CVE-2008-2935
2008-08-01 14:00:00
ubuntu
ubuntu
libxslt vulnerabilities
2008-08-01 00:00:00

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

7.3

Confidence

Low

EPSS

0.18

Percentile

96.2%

JSON
Related for NVD:CVE-2008-2935
openvas17nessus13checkpoint_advisories1prion1centos1seebug1securityvulns2cve1redhat1fedora2debian1debiancve1oraclelinux1ubuntucve1gentoo1cvelist1ubuntu1