Login Request a demo
Unscored severity · published Aug 1, 2008
CVE-2008-2935
Multiple heap-based buffer overflows in the rc4 (1) encryption (aka exsltCryptoRc4EncryptFunction) and (2) decryption (aka exsltCryptoRc4DecryptFunction) functions in crypto.c in…
–
CVSS
12.8%
EPSS
No
On KEV
Description
Multiple heap-based buffer overflows in the rc4 (1) encryption (aka exsltCryptoRc4EncryptFunction) and (2) decryption (aka exsltCryptoRc4DecryptFunction) functions in crypto.c in libexslt in libxslt 1.1.8 through 1.1.24 allow context-dependent attackers to execute arbitrary code via an XML file containing a long string as "an argument in the XSL input."
Exploitation
Is it being used?
Exploit prediction (EPSS)12.8% · higher than 96% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
LI
Libxslt · Xmlsoft
1.1.8; 1.1.9; 1.1.10; 1.1.11; 1.1.12; 1.1.13; +11 more · source: NVD
Affected product
LI
Libxslt
Xmlsoft
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2008-2935
CVE.org
https://www.cve.org/CVERecord?id=CVE-2008-2935
secunia.com
http://secunia.com/advisories/31230
secunia.com
http://secunia.com/advisories/31310
secunia.com
http://secunia.com/advisories/31331
secunia.com
http://secunia.com/advisories/31363
secunia.com
http://secunia.com/advisories/31395
secunia.com
http://secunia.com/advisories/31399
More from Libxslt
9.8
CVE-2019-11068
libxslt through 1.1.33 allows bypass of a protection mechanism because callers of xsltCheckRead and xsltCheckWrite permit access even upon receiving a -1 error code
9.8
CVE-2016-4610
libxslt in Apple iOS before 9.3.3, OS X before 10.11.6, iTunes before 12.4.2 on Windows, iCloud before 5.2.1 on Windows, tvOS before 9.2.2, and watchOS before 2.2.2 allows remote…
9.8
CVE-2016-4609
libxslt in Apple iOS before 9.3.3, OS X before 10.11.6, iTunes before 12.4.2 on Windows, iCloud before 5.2.1 on Windows, tvOS before 9.2.2, and watchOS before 2.2.2 allows remote…
9.8
CVE-2016-4608
libxslt in Apple iOS before 9.3.3, OS X before 10.11.6, iTunes before 12.4.2 on Windows, iCloud before 5.2.1 on Windows, tvOS before 9.2.2, and watchOS before 2.2.2 allows remote…
9.8
CVE-2016-4607
libxslt in Apple iOS before 9.3.3, OS X before 10.11.6, iTunes before 12.4.2 on Windows, iCloud before 5.2.1 on Windows, tvOS before 9.2.2, and watchOS before 2.2.2 allows remote…