CVE-2008-2935
NoneCVSS
—
EPSS
12.8%
Published
Aug 1, 2008
CISA due date
—
The record
Multiple heap-based buffer overflows in the rc4 (1) encryption (aka exsltCryptoRc4EncryptFunction) and (2) decryption (aka exsltCryptoRc4DecryptFunction) functions in crypto.c in libexslt in libxslt 1.1.8 through 1.1.24 allow context-dependent attackers to execute arbitrary code via an XML file containing a long string as "an argument in the XSL input."
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Debian:11 | libxslt | 0 | 1.1.24-2 |
| Debian:12 | libxslt | 0 | 1.1.24-2 |
| Debian:13 | libxslt | 0 | 1.1.24-2 |
| Debian:4.0 | libxslt | 0 | 1.1.19-3 |
| Debian:5.0 | libxslt | 0 | 1.1.24-1+lenny1 |
| Red Hat:enterprise_linux:4::as | libxslt | 0 | 0:1.1.11-1.el4_7.2 |
| Red Hat:enterprise_linux:4::as | libxslt-debuginfo | 0 | 0:1.1.11-1.el4_7.2 |
| Red Hat:enterprise_linux:4::as | libxslt-devel | 0 | 0:1.1.11-1.el4_7.2 |
| Red Hat:enterprise_linux:4::as | libxslt-python | 0 | 0:1.1.11-1.el4_7.2 |
| Red Hat:enterprise_linux:4::desktop | libxslt | 0 | 0:1.1.11-1.el4_7.2 |
| Red Hat:enterprise_linux:4::desktop | libxslt-debuginfo | 0 | 0:1.1.11-1.el4_7.2 |
| Red Hat:enterprise_linux:4::desktop | libxslt-devel | 0 | 0:1.1.11-1.el4_7.2 |
| Red Hat:enterprise_linux:4::desktop | libxslt-python | 0 | 0:1.1.11-1.el4_7.2 |
| Red Hat:enterprise_linux:4::es | libxslt | 0 | 0:1.1.11-1.el4_7.2 |
| Red Hat:enterprise_linux:4::es | libxslt-debuginfo | 0 | 0:1.1.11-1.el4_7.2 |
| Red Hat:enterprise_linux:4::es | libxslt-devel | 0 | 0:1.1.11-1.el4_7.2 |
| Red Hat:enterprise_linux:4::es | libxslt-python | 0 | 0:1.1.11-1.el4_7.2 |
| Red Hat:enterprise_linux:4::ws | libxslt | 0 | 0:1.1.11-1.el4_7.2 |
| Red Hat:enterprise_linux:4::ws | libxslt-debuginfo | 0 | 0:1.1.11-1.el4_7.2 |
| Red Hat:enterprise_linux:4::ws | libxslt-devel | 0 | 0:1.1.11-1.el4_7.2 |
| Red Hat:enterprise_linux:4::ws | libxslt-python | 0 | 0:1.1.11-1.el4_7.2 |
| Red Hat:enterprise_linux:5::client | libxslt | 0 | 0:1.1.17-2.el5_2.2 |
| Red Hat:enterprise_linux:5::client | libxslt-debuginfo | 0 | 0:1.1.17-2.el5_2.2 |
| Red Hat:enterprise_linux:5::client | libxslt-devel | 0 | 0:1.1.17-2.el5_2.2 |
| Red Hat:enterprise_linux:5::client | libxslt-python | 0 | 0:1.1.17-2.el5_2.2 |
| Red Hat:enterprise_linux:5::client_workstation | libxslt | 0 | 0:1.1.17-2.el5_2.2 |
| Red Hat:enterprise_linux:5::client_workstation | libxslt-debuginfo | 0 | 0:1.1.17-2.el5_2.2 |
| Red Hat:enterprise_linux:5::client_workstation | libxslt-devel | 0 | 0:1.1.17-2.el5_2.2 |
| Red Hat:enterprise_linux:5::client_workstation | libxslt-python | 0 | 0:1.1.17-2.el5_2.2 |
| Red Hat:enterprise_linux:5::server | libxslt | 0 | 0:1.1.17-2.el5_2.2 |
| Red Hat:enterprise_linux:5::server | libxslt-debuginfo | 0 | 0:1.1.17-2.el5_2.2 |
| Red Hat:enterprise_linux:5::server | libxslt-devel | 0 | 0:1.1.17-2.el5_2.2 |
| Red Hat:enterprise_linux:5::server | libxslt-python | 0 | 0:1.1.17-2.el5_2.2 |
Related vulnerabilities
- CVE-2019-13117 In numbers.c in libxslt 1.1.33, an xsl:number with certain format strings could lead to a… Also affects libxslt
- CVE-2019-11068 libxslt through 1.1.33 allows bypass of a protection mechanism because callers of… Also affects libxslt
- CVE-2017-5029 The xsltAddTextString function in transform.c in libxslt 1.1.29, as used in Blink in… Also affects libxslt
- CVE-2015-7995 The xsltStylePreCompute function in preproc.c in libxslt 1.1.28 does not check if the… Also affects libxslt
- CVE-2008-1767 Buffer overflow in pattern.c in libxslt before 1.1.24 allows context-dependent attackers… Also affects libxslt
- CVE-2026-112108 A vulnerability was determined in ztxz16 fastllm up to 0.1.8.2. CWE-119
- CVE-2026-112073 A vulnerability was identified in Tencent ncnn up to 44b02dabdcf97499281a4692ebd65bad73dc… CWE-119
- CVE-2026-90831 A vulnerability was detected in GNU Binutils 2.47. CWE-119