CVE

Id
64467  
CVE No.
CVE-2013-4520  
Status
Candidate  
Description
xslt.c in libxslt before 1.1.25 allows context-dependent attackers to cause a denial of service (crash) via a stylesheet that embeds a DTD, which causes a structure to be accessed as a different type. NOTE: this issue is due to an incomplete fix for CVE-2012-2825.  
Phase
Assigned (20130612)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
635540 64467 CVE-2013-4520 MLIST:[oss-security] 20131105 CVE Request: additional fix for CVE-2012-2825 libxslt crash  View
635541 64467 CVE-2013-4520 URL:http://seclists.org/oss-sec/2013/q4/238  View
635542 64467 CVE-2013-4520 MLIST:[oss-security] 20131105 Re: CVE Request: additional fix for CVE-2012-2825 libxslt crash  View
635543 64467 CVE-2013-4520 URL:http://seclists.org/oss-sec/2013/q4/239  View
635544 64467 CVE-2013-4520 MISC:https://gitorious.org/libxslt/libxslt/commit/7089a62b8f133b42a2981cf1f920a8b3fe9a8caa  View
635545 64467 CVE-2013-4520 CONFIRM:https://bugzilla.novell.com/show_bug.cgi?id=849019  View
635546 64467 CVE-2013-4520 SUSE:SUSE-SU-2013:1654  View
635547 64467 CVE-2013-4520 URL:https://www.suse.com/support/update/announcement/2013/suse-su-20131654-1.html  View
635548 64467 CVE-2013-4520 SUSE:SUSE-SU-2013:1656  View
635549 64467 CVE-2013-4520 URL:https://www.suse.com/support/update/announcement/2013/suse-su-20131656-1.html  View
635550 64467 CVE-2013-4520 OSVDB:99671  View
635551 64467 CVE-2013-4520 URL:http://www.osvdb.org/99671  View
635552 64467 CVE-2013-4520 SECUNIA:56072  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
23727 JVNDB-2013-005302 Moodle の mod/quiz/report/responses/responses_table.php におけるクロスサイトスクリプティングの脆弱性 Moodle の mod/quiz/report/responses/responses_table.php には、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2013-4525 64467 3.5 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-005302.html  View