Unrated severityNVD Advisory· Published Aug 31, 2012· Updated Apr 29, 2026
CVE-2012-2870
CVE-2012-2870
Description
libxslt 1.1.26 and earlier, as used in Google Chrome before 21.0.1180.89, does not properly manage memory, which might allow remote attackers to cause a denial of service (application crash) via a crafted XSLT expression that is not properly identified during XPath navigation, related to (1) the xsltCompileLocationPathPattern function in libxslt/pattern.c and (2) the xsltGenerateIdFunction function in libxslt/functions.c.
Affected products
118cpe:2.3:o:apple:iphone_os:1.1.0:*:*:*:*:*:*:*+ 47 more
- cpe:2.3:o:apple:iphone_os:1.1.0:*:*:*:*:*:*:*
- cpe:2.3:o:apple:iphone_os:1.1.1:*:*:*:*:*:*:*
- cpe:2.3:o:apple:iphone_os:1.1.2:*:*:*:*:*:*:*
- cpe:2.3:o:apple:iphone_os:1.1.3:*:*:*:*:*:*:*
- cpe:2.3:o:apple:iphone_os:1.1.4:*:*:*:*:*:*:*
- cpe:2.3:o:apple:iphone_os:1.1.5:*:*:*:*:*:*:*
- cpe:2.3:o:apple:iphone_os:2.0:*:*:*:*:*:*:*
- cpe:2.3:o:apple:iphone_os:2.0.0:*:*:*:*:*:*:*
- cpe:2.3:o:apple:iphone_os:2.0.1:*:*:*:*:*:*:*
- cpe:2.3:o:apple:iphone_os:2.0.2:*:*:*:*:*:*:*
- cpe:2.3:o:apple:iphone_os:2.1:*:*:*:*:*:*:*
- cpe:2.3:o:apple:iphone_os:2.1.1:*:*:*:*:*:*:*
- cpe:2.3:o:apple:iphone_os:2.2:*:*:*:*:*:*:*
- cpe:2.3:o:apple:iphone_os:2.2.1:*:*:*:*:*:*:*
- cpe:2.3:o:apple:iphone_os:3.0:*:*:*:*:*:*:*
- cpe:2.3:o:apple:iphone_os:3.0.1:*:*:*:*:*:*:*
- cpe:2.3:o:apple:iphone_os:3.1:*:*:*:*:*:*:*
- cpe:2.3:o:apple:iphone_os:3.1.2:*:*:*:*:*:*:*
- cpe:2.3:o:apple:iphone_os:3.1.3:*:*:*:*:*:*:*
- cpe:2.3:o:apple:iphone_os:3.2:*:*:*:*:*:*:*
- cpe:2.3:o:apple:iphone_os:3.2.1:*:*:*:*:*:*:*
- cpe:2.3:o:apple:iphone_os:3.2.2:*:*:*:*:*:*:*
- cpe:2.3:o:apple:iphone_os:4.0:*:*:*:*:*:*:*
- cpe:2.3:o:apple:iphone_os:4.0.1:*:*:*:*:*:*:*
- cpe:2.3:o:apple:iphone_os:4.0.2:*:*:*:*:*:*:*
- cpe:2.3:o:apple:iphone_os:4.1:*:*:*:*:*:*:*
- cpe:2.3:o:apple:iphone_os:4.2.1:*:*:*:*:*:*:*
- cpe:2.3:o:apple:iphone_os:4.2.5:*:*:*:*:*:*:*
- cpe:2.3:o:apple:iphone_os:4.2.8:*:*:*:*:*:*:*
- cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*range: <=6.1.4
- cpe:2.3:o:apple:iphone_os:1.0.0:*:*:*:*:*:*:*
- cpe:2.3:o:apple:iphone_os:1.0.1:*:*:*:*:*:*:*
- cpe:2.3:o:apple:iphone_os:1.0.2:*:*:*:*:*:*:*
- cpe:2.3:o:apple:iphone_os:4.3.0:*:*:*:*:*:*:*
- cpe:2.3:o:apple:iphone_os:4.3.1:*:*:*:*:*:*:*
- cpe:2.3:o:apple:iphone_os:4.3.2:*:*:*:*:*:*:*
- cpe:2.3:o:apple:iphone_os:4.3.3:*:*:*:*:*:*:*
- cpe:2.3:o:apple:iphone_os:4.3.5:*:*:*:*:*:*:*
- cpe:2.3:o:apple:iphone_os:5.0:*:*:*:*:*:*:*
- cpe:2.3:o:apple:iphone_os:5.0.1:*:*:*:*:*:*:*
- cpe:2.3:o:apple:iphone_os:5.1:*:*:*:*:*:*:*
- cpe:2.3:o:apple:iphone_os:5.1.1:*:*:*:*:*:*:*
- cpe:2.3:o:apple:iphone_os:6.0:*:*:*:*:*:*:*
- cpe:2.3:o:apple:iphone_os:6.0.1:*:*:*:*:*:*:*
- cpe:2.3:o:apple:iphone_os:6.0.2:*:*:*:*:*:*:*
- cpe:2.3:o:apple:iphone_os:6.1:*:*:*:*:*:*:*
- cpe:2.3:o:apple:iphone_os:6.1.2:*:*:*:*:*:*:*
- cpe:2.3:o:apple:iphone_os:6.1.3:*:*:*:*:*:*:*
cpe:2.3:a:google:chrome:21.0.1180.35:*:*:*:*:*:*:*+ 51 more
- cpe:2.3:a:google:chrome:21.0.1180.35:*:*:*:*:*:*:*
- cpe:2.3:a:google:chrome:21.0.1180.36:*:*:*:*:*:*:*
- cpe:2.3:a:google:chrome:21.0.1180.37:*:*:*:*:*:*:*
- cpe:2.3:a:google:chrome:21.0.1180.38:*:*:*:*:*:*:*
- cpe:2.3:a:google:chrome:21.0.1180.39:*:*:*:*:*:*:*
- cpe:2.3:a:google:chrome:21.0.1180.41:*:*:*:*:*:*:*
- cpe:2.3:a:google:chrome:21.0.1180.46:*:*:*:*:*:*:*
- cpe:2.3:a:google:chrome:21.0.1180.47:*:*:*:*:*:*:*
- cpe:2.3:a:google:chrome:21.0.1180.48:*:*:*:*:*:*:*
- cpe:2.3:a:google:chrome:21.0.1180.49:*:*:*:*:*:*:*
- cpe:2.3:a:google:chrome:21.0.1180.50:*:*:*:*:*:*:*
- cpe:2.3:a:google:chrome:21.0.1180.51:*:*:*:*:*:*:*
- cpe:2.3:a:google:chrome:21.0.1180.82:*:*:*:*:*:*:*
- cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*range: <=21.0.1180.88
- cpe:2.3:a:google:chrome:21.0.1180.0:*:*:*:*:*:*:*
- cpe:2.3:a:google:chrome:21.0.1180.1:*:*:*:*:*:*:*
- cpe:2.3:a:google:chrome:21.0.1180.2:*:*:*:*:*:*:*
- cpe:2.3:a:google:chrome:21.0.1180.31:*:*:*:*:*:*:*
- cpe:2.3:a:google:chrome:21.0.1180.32:*:*:*:*:*:*:*
- cpe:2.3:a:google:chrome:21.0.1180.33:*:*:*:*:*:*:*
- cpe:2.3:a:google:chrome:21.0.1180.34:*:*:*:*:*:*:*
- cpe:2.3:a:google:chrome:21.0.1180.52:*:*:*:*:*:*:*
- cpe:2.3:a:google:chrome:21.0.1180.53:*:*:*:*:*:*:*
- cpe:2.3:a:google:chrome:21.0.1180.54:*:*:*:*:*:*:*
- cpe:2.3:a:google:chrome:21.0.1180.55:*:*:*:*:*:*:*
- cpe:2.3:a:google:chrome:21.0.1180.56:*:*:*:*:*:*:*
- cpe:2.3:a:google:chrome:21.0.1180.57:*:*:*:*:*:*:*
- cpe:2.3:a:google:chrome:21.0.1180.59:*:*:*:*:*:*:*
- cpe:2.3:a:google:chrome:21.0.1180.60:*:*:*:*:*:*:*
- cpe:2.3:a:google:chrome:21.0.1180.61:*:*:*:*:*:*:*
- cpe:2.3:a:google:chrome:21.0.1180.62:*:*:*:*:*:*:*
- cpe:2.3:a:google:chrome:21.0.1180.63:*:*:*:*:*:*:*
- cpe:2.3:a:google:chrome:21.0.1180.64:*:*:*:*:*:*:*
- cpe:2.3:a:google:chrome:21.0.1180.68:*:*:*:*:*:*:*
- cpe:2.3:a:google:chrome:21.0.1180.69:*:*:*:*:*:*:*
- cpe:2.3:a:google:chrome:21.0.1180.70:*:*:*:*:*:*:*
- cpe:2.3:a:google:chrome:21.0.1180.71:*:*:*:*:*:*:*
- cpe:2.3:a:google:chrome:21.0.1180.72:*:*:*:*:*:*:*
- cpe:2.3:a:google:chrome:21.0.1180.73:*:*:*:*:*:*:*
- cpe:2.3:a:google:chrome:21.0.1180.74:*:*:*:*:*:*:*
- cpe:2.3:a:google:chrome:21.0.1180.75:*:*:*:*:*:*:*
- cpe:2.3:a:google:chrome:21.0.1180.76:*:*:*:*:*:*:*
- cpe:2.3:a:google:chrome:21.0.1180.77:*:*:*:*:*:*:*
- cpe:2.3:a:google:chrome:21.0.1180.78:*:*:*:*:*:*:*
- cpe:2.3:a:google:chrome:21.0.1180.79:*:*:*:*:*:*:*
- cpe:2.3:a:google:chrome:21.0.1180.80:*:*:*:*:*:*:*
- cpe:2.3:a:google:chrome:21.0.1180.81:*:*:*:*:*:*:*
- cpe:2.3:a:google:chrome:21.0.1180.83:*:*:*:*:*:*:*
- cpe:2.3:a:google:chrome:21.0.1180.84:*:*:*:*:*:*:*
- cpe:2.3:a:google:chrome:21.0.1180.85:*:*:*:*:*:*:*
- cpe:2.3:a:google:chrome:21.0.1180.86:*:*:*:*:*:*:*
- cpe:2.3:a:google:chrome:21.0.1180.87:*:*:*:*:*:*:*
cpe:2.3:a:xmlsoft:libxslt:*:*:*:*:*:*:*:*+ 17 more
- cpe:2.3:a:xmlsoft:libxslt:*:*:*:*:*:*:*:*range: <=1.1.26
- cpe:2.3:a:xmlsoft:libxslt:1.1.8:*:*:*:*:*:*:*
- cpe:2.3:a:xmlsoft:libxslt:1.1.9:*:*:*:*:*:*:*
- cpe:2.3:a:xmlsoft:libxslt:1.1.10:*:*:*:*:*:*:*
- cpe:2.3:a:xmlsoft:libxslt:1.1.11:*:*:*:*:*:*:*
- cpe:2.3:a:xmlsoft:libxslt:1.1.12:*:*:*:*:*:*:*
- cpe:2.3:a:xmlsoft:libxslt:1.1.13:*:*:*:*:*:*:*
- cpe:2.3:a:xmlsoft:libxslt:1.1.14:*:*:*:*:*:*:*
- cpe:2.3:a:xmlsoft:libxslt:1.1.15:*:*:*:*:*:*:*
- cpe:2.3:a:xmlsoft:libxslt:1.1.16:*:*:*:*:*:*:*
- cpe:2.3:a:xmlsoft:libxslt:1.1.17:*:*:*:*:*:*:*
- cpe:2.3:a:xmlsoft:libxslt:1.1.18:*:*:*:*:*:*:*
- cpe:2.3:a:xmlsoft:libxslt:1.1.19:*:*:*:*:*:*:*
- cpe:2.3:a:xmlsoft:libxslt:1.1.20:*:*:*:*:*:*:*
- cpe:2.3:a:xmlsoft:libxslt:1.1.21:*:*:*:*:*:*:*
- cpe:2.3:a:xmlsoft:libxslt:1.1.22:*:*:*:*:*:*:*
- cpe:2.3:a:xmlsoft:libxslt:1.1.23:*:*:*:*:*:*:*
- cpe:2.3:a:xmlsoft:libxslt:1.1.24:*:*:*:*:*:*:*
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
18- code.google.com/p/chromium/issues/detailnvd
- code.google.com/p/chromium/issues/detailnvd
- googlechromereleases.blogspot.com/2012/08/stable-channel-update_30.htmlnvd
- lists.apple.com/archives/security-announce/2013/Oct/msg00009.htmlnvd
- lists.apple.com/archives/security-announce/2013/Sep/msg00006.htmlnvd
- lists.opensuse.org/opensuse-security-announce/2012-09/msg00030.htmlnvd
- secunia.com/advisories/50838nvd
- secunia.com/advisories/54886nvd
- src.chromium.org/viewvc/chrome/trunk/src/third_party/libxslt/libxslt/functions.cnvd
- src.chromium.org/viewvc/chrome/trunk/src/third_party/libxslt/libxslt/functions.cnvd
- src.chromium.org/viewvc/chrome/trunk/src/third_party/libxslt/libxslt/pattern.cnvd
- src.chromium.org/viewvc/chrome/trunk/src/third_party/libxslt/libxslt/pattern.cnvd
- support.apple.com/kb/HT5934nvd
- support.apple.com/kb/HT6001nvd
- www.debian.org/security/2012/dsa-2555nvd
- www.mandriva.com/security/advisoriesnvd
- chromiumcodereview.appspot.com/10823168nvd
- chromiumcodereview.appspot.com/10830177nvd
News mentions
0No linked articles in our index yet.