Xmlsoft: >> Libxslt >> 1.1.28 Security Vulnerabilities
numbers.c in libxslt before 1.1.29, as used in Google Chrome before 51.0.2704.63, mishandles namespace nodes, which allows remote attackers to cause a denial of service (out-of-bounds heap memory access) or possibly have unspecified other impact via a crafted document.
CVSS Score
7.5
EPSS Score
0.007
Published
2016-06-05
The xsltStylePreCompute function in preproc.c in libxslt 1.1.28 does not check if the parent node is an element, which allows attackers to cause a denial of service via a crafted XML file, related to a "type confusion" issue.
CVSS Score
5.0
EPSS Score
0.015
Published
2015-11-17
Page 2