CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2008-2935

Multiple heap-based buffer overflows in the rc4 (1) encryption (aka exsltCryptoRc4EncryptFunction) and (2) decryption (aka exsltCryptoRc4DecryptFunction) functions in crypto.c in libexslt in libxslt 1.1.8 through 1.1.24 allow context-dependent attackers to execute arbitrary code via an XML file containing a long string as "an argument in the XSL input."

Exploit prediction scoring system (EPSS) score

EPSS Score 0.207

EPSS Ranking 95.4%

CVSS Severity

CVSS v2 Score 7.5

References

Products affected by CVE-2008-2935

Xmlsoft » Libxslt » Version: 1.1.10

cpe:2.3:a:xmlsoft:libxslt:1.1.10
Xmlsoft » Libxslt » Version: 1.1.11

cpe:2.3:a:xmlsoft:libxslt:1.1.11
Xmlsoft » Libxslt » Version: 1.1.12

cpe:2.3:a:xmlsoft:libxslt:1.1.12
Xmlsoft » Libxslt » Version: 1.1.13

cpe:2.3:a:xmlsoft:libxslt:1.1.13
Xmlsoft » Libxslt » Version: 1.1.14

cpe:2.3:a:xmlsoft:libxslt:1.1.14
Xmlsoft » Libxslt » Version: 1.1.15

cpe:2.3:a:xmlsoft:libxslt:1.1.15
Xmlsoft » Libxslt » Version: 1.1.16

cpe:2.3:a:xmlsoft:libxslt:1.1.16
Xmlsoft » Libxslt » Version: 1.1.17

cpe:2.3:a:xmlsoft:libxslt:1.1.17
Xmlsoft » Libxslt » Version: 1.1.18

cpe:2.3:a:xmlsoft:libxslt:1.1.18
Xmlsoft » Libxslt » Version: 1.1.19

cpe:2.3:a:xmlsoft:libxslt:1.1.19
Xmlsoft » Libxslt » Version: 1.1.20

cpe:2.3:a:xmlsoft:libxslt:1.1.20
Xmlsoft » Libxslt » Version: 1.1.21

cpe:2.3:a:xmlsoft:libxslt:1.1.21
Xmlsoft » Libxslt » Version: 1.1.22

cpe:2.3:a:xmlsoft:libxslt:1.1.22
Xmlsoft » Libxslt » Version: 1.1.23

cpe:2.3:a:xmlsoft:libxslt:1.1.23
Xmlsoft » Libxslt » Version: 1.1.24

cpe:2.3:a:xmlsoft:libxslt:1.1.24
Xmlsoft » Libxslt » Version: 1.1.8

cpe:2.3:a:xmlsoft:libxslt:1.1.8
Xmlsoft » Libxslt » Version: 1.1.9

cpe:2.3:a:xmlsoft:libxslt:1.1.9

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2008-2935

Products

Pricing

Contact Us