NuytsTech Security

CVE-2015-7995

by ·

The xsltStylePreCompute function in preproc.c in libxslt 1.1.28 does not check if the parent node is an element, which allows attackers to cause a denial of service via a crafted XML file, related to a "type confusion" issue.

Date published : 2015-11-17

http://lists.apple.com/archives/security-announce/2016/Jan/msg00002.html

http://lists.apple.com/archives/security-announce/2016/Jan/msg00003.html

Tags: