cve/2015/CVE-2015-7995.md

CVE-2015-7995

Description

The xsltStylePreCompute function in preproc.c in libxslt 1.1.28 does not check if the parent node is an element, which allows attackers to cause a denial of service via a crafted XML file, related to a "type confusion" issue.

POC

Reference

• http://www.oracle.com/technetwork/topics/security/bulletinjan2016-2867206.html
• https://bugzilla.redhat.com/show_bug.cgi?id=1257962

Github

• https://github.com/ARPSyndicate/cvemon