NVD

Id
8366  
Name
CVE-2011-1425  
Description
xslt.c in XML Security Library (aka xmlsec) before 1.2.17, as used in WebKit and other products, when XSLT is enabled, allows remote attackers to create or overwrite arbitrary files via vectors involving the libxslt output extension and a ds:Transform element during signature verification.  
Reject
 
CVSS Version
2  
CVSS Score
5.1  
Severity
Medium  
CVSS Base Score
5.1  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
4.9  
CVSS Vector
(AV:N/AC:H/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-07  
Published
2011-04-04  
Modified Date
2011-09-06  
Seq
2011-1425  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
47918 8366 CVE-2011-1425 http://git.gnome.org/browse/xmlsec/commit/?id=2d5eddcc4163ea050cf3a3a1a25452bb5124f780  View
47919 8366 CVE-2011-1425 http://git.gnome.org/browse/xmlsec/commit/?id=35eaacde6093d6711339754fc2146341b8b9f5fa  View
47920 8366 CVE-2011-1425 http://trac.webkit.org/changeset/79159  View
47921 8366 CVE-2011-1425 [xmlsec] 20110331 New xmlsec 1.2.17 release  View
47922 8366 CVE-2011-1425 DSA-2219  View
47923 8366 CVE-2011-1425 MDVSA-2011:063  View
47924 8366 CVE-2011-1425 RHSA-2011:0486  View
47925 8366 CVE-2011-1425 47135  View
47926 8366 CVE-2011-1425 1025284  View
47927 8366 CVE-2011-1425 ADV-2011-0855  View
47928 8366 CVE-2011-1425 ADV-2011-0858  View
47929 8366 CVE-2011-1425 ADV-2011-1010  View
47930 8366 CVE-2011-1425 ADV-2011-1172  View
47931 8366 CVE-2011-1425 xmlsecurity-xmlfiles-sec-bypass(66506)  View
47932 8366 CVE-2011-1425 https://bugs.webkit.org/show_bug.cgi?id=52688  View
47933 8366 CVE-2011-1425 https://bugzilla.redhat.com/show_bug.cgi?id=692133  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
31382 JVNDB-2011-001622 WebKit などで利用される xslt.c における任意のファイルを作成される脆弱性 WebKit などで利用される XML Security Library の xslt.c には、XSLT が有効な際、任意のファイルを作成される、または上書きされる脆弱性が存在します。 CVE-2011-1425 49332 CVE-2011-1425 8366 5.1 http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-001622.html 2011-03-31 2011-05-24 View