Vulnetix
Try Vulnetix Request Demo
CVE-2017-5029 PUBLISHED

The xsltAddTextString function in transform.c in libxslt 1.1.29, as used in Blink in Google Chrome prior to 57.0.2987.98 for Mac, Windows, and Linux and 57.0.2987.108 for Android, lacked a check for integer overflow during a size calculation, which allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page.

EPSS 1.27% · 79.4th percentile

Risk Scores

EPSS Score
1.27%
79.4th percentile

Affected Products

VendorProductVersions
Salesforceflow
Ubuntu:14.04:LTSoxide-qt1.3.4-0ubuntu0.14.04.1, 1.1.2-0ubuntu0.14.04.1, 1.2.5-0ubuntu0.14.04.1
Ubuntu:16.04:LTSlibxslt1.1.28-2.1, 1.1.28-2build2, 0
Ubuntu:16.04:LTSchromium-browser53.0.2785.143-0ubuntu0.16.04.1.1257, 0, 45.0.2454.101-0ubuntu1.1201
Ubuntu:14.04:LTSchromium-browser36.0.1985.125-0ubuntu1.14.04.0~pkg1029, 45.0.2454.85-0ubuntu0.14.04.1.1097, 44.0.2403.89-0ubuntu0.14.04.1.1095
Ubuntu:16.04:LTSoxide-qt1.20.4-0ubuntu0.16.04.1, 1.12.6-0ubuntu1, 0
Ubuntu:14.04:LTSlibxslt1.1.28-2build1, 0, 1.1.28-2

Timeline

References

Open in Interactive Console →