Read the docs
TI-2012-02485 Aliases CVE-2012-2870GHSA-3g6j-g63v-rg6h

libxslt 1.1.26 and earlier, as used in Google Chrome before 21.0.1180.89, does not…

Priority LOW 25CWE-399Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
— Not recorded in CVSS 2.0
Attack complexity
Medium
Impact type
Denial of service
Confidentiality · integrity · availability
None · None · Partial
Fix status
Fixed

Attack profile from CVSS 2.0 · NVD. Fix status from CNA and Red Hat. Impact type from CWE-399 and the CVSS impact.

Summary

libxslt 1.1.26 and earlier, as used in Google Chrome before 21.0.1180.89, does not properly manage memory, which might allow remote attackers to cause a denial of service (application crash) via a crafted XSLT expression that is not properly identified during XPath navigation, related to (1) the xsltCompileLocationPathPattern function in libxslt/pattern.c and (2) the xsltGenerateIdFunction function in libxslt/functions.c.

Why it matters now

EPSS 0.02455 84th percentileScored 2026-11-07
Fix Fixed Red Hat: 1 advisory

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
——all versions—No fix listedCNA
  • — Vendor— Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 118

CPEVersionsRoleVendor
cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*up to 6.1.4VulnerableApple
cpe:2.3:o:apple:iphone_os:1.0.0:*:*:*:*:*:*:*1.0.0VulnerableApple
cpe:2.3:o:apple:iphone_os:1.0.1:*:*:*:*:*:*:*1.0.1VulnerableApple
cpe:2.3:o:apple:iphone_os:1.0.2:*:*:*:*:*:*:*1.0.2VulnerableApple
cpe:2.3:o:apple:iphone_os:1.1.0:*:*:*:*:*:*:*1.1.0VulnerableApple
cpe:2.3:o:apple:iphone_os:1.1.1:*:*:*:*:*:*:*1.1.1VulnerableApple
cpe:2.3:o:apple:iphone_os:1.1.2:*:*:*:*:*:*:*1.1.2VulnerableApple
cpe:2.3:o:apple:iphone_os:1.1.3:*:*:*:*:*:*:*1.1.3VulnerableApple
cpe:2.3:o:apple:iphone_os:1.1.4:*:*:*:*:*:*:*1.1.4VulnerableApple
cpe:2.3:o:apple:iphone_os:1.1.5:*:*:*:*:*:*:*1.1.5VulnerableApple
  • cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:* Versions up to 6.1.4 Vulnerable ·Apple
  • cpe:2.3:o:apple:iphone_os:1.0.0:*:*:*:*:*:*:* Versions 1.0.0 Vulnerable ·Apple
  • cpe:2.3:o:apple:iphone_os:1.0.1:*:*:*:*:*:*:* Versions 1.0.1 Vulnerable ·Apple
  • cpe:2.3:o:apple:iphone_os:1.0.2:*:*:*:*:*:*:* Versions 1.0.2 Vulnerable ·Apple
  • cpe:2.3:o:apple:iphone_os:1.1.0:*:*:*:*:*:*:* Versions 1.1.0 Vulnerable ·Apple
  • cpe:2.3:o:apple:iphone_os:1.1.1:*:*:*:*:*:*:* Versions 1.1.1 Vulnerable ·Apple
  • cpe:2.3:o:apple:iphone_os:1.1.2:*:*:*:*:*:*:* Versions 1.1.2 Vulnerable ·Apple
  • cpe:2.3:o:apple:iphone_os:1.1.3:*:*:*:*:*:*:* Versions 1.1.3 Vulnerable ·Apple
  • cpe:2.3:o:apple:iphone_os:1.1.4:*:*:*:*:*:*:* Versions 1.1.4 Vulnerable ·Apple
  • cpe:2.3:o:apple:iphone_os:1.1.5:*:*:*:*:*:*:* Versions 1.1.5 Vulnerable ·Apple
Show 108 more CPE
CPEVersionsRoleVendor
cpe:2.3:o:apple:iphone_os:2.0:*:*:*:*:*:*:*2.0VulnerableApple
cpe:2.3:o:apple:iphone_os:2.0.0:*:*:*:*:*:*:*2.0.0VulnerableApple
cpe:2.3:o:apple:iphone_os:2.0.1:*:*:*:*:*:*:*2.0.1VulnerableApple
cpe:2.3:o:apple:iphone_os:2.0.2:*:*:*:*:*:*:*2.0.2VulnerableApple
cpe:2.3:o:apple:iphone_os:2.1:*:*:*:*:*:*:*2.1VulnerableApple
cpe:2.3:o:apple:iphone_os:2.1.1:*:*:*:*:*:*:*2.1.1VulnerableApple
cpe:2.3:o:apple:iphone_os:2.2:*:*:*:*:*:*:*2.2VulnerableApple
cpe:2.3:o:apple:iphone_os:2.2.1:*:*:*:*:*:*:*2.2.1VulnerableApple
cpe:2.3:o:apple:iphone_os:3.0:*:*:*:*:*:*:*3.0VulnerableApple
cpe:2.3:o:apple:iphone_os:3.0.1:*:*:*:*:*:*:*3.0.1VulnerableApple
cpe:2.3:o:apple:iphone_os:3.1:*:*:*:*:*:*:*3.1VulnerableApple
cpe:2.3:o:apple:iphone_os:3.1.2:*:*:*:*:*:*:*3.1.2VulnerableApple
cpe:2.3:o:apple:iphone_os:3.1.3:*:*:*:*:*:*:*3.1.3VulnerableApple
cpe:2.3:o:apple:iphone_os:3.2:*:*:*:*:*:*:*3.2VulnerableApple
cpe:2.3:o:apple:iphone_os:3.2.1:*:*:*:*:*:*:*3.2.1VulnerableApple
cpe:2.3:o:apple:iphone_os:3.2.2:*:*:*:*:*:*:*3.2.2VulnerableApple
cpe:2.3:o:apple:iphone_os:4.0:*:*:*:*:*:*:*4.0VulnerableApple
cpe:2.3:o:apple:iphone_os:4.0.1:*:*:*:*:*:*:*4.0.1VulnerableApple
cpe:2.3:o:apple:iphone_os:4.0.2:*:*:*:*:*:*:*4.0.2VulnerableApple
cpe:2.3:o:apple:iphone_os:4.1:*:*:*:*:*:*:*4.1VulnerableApple
cpe:2.3:o:apple:iphone_os:4.2.1:*:*:*:*:*:*:*4.2.1VulnerableApple
cpe:2.3:o:apple:iphone_os:4.2.5:*:*:*:*:*:*:*4.2.5VulnerableApple
cpe:2.3:o:apple:iphone_os:4.2.8:*:*:*:*:*:*:*4.2.8VulnerableApple
cpe:2.3:o:apple:iphone_os:4.3.0:*:*:*:*:*:*:*4.3.0VulnerableApple
cpe:2.3:o:apple:iphone_os:4.3.1:*:*:*:*:*:*:*4.3.1VulnerableApple
cpe:2.3:o:apple:iphone_os:4.3.2:*:*:*:*:*:*:*4.3.2VulnerableApple
cpe:2.3:o:apple:iphone_os:4.3.3:*:*:*:*:*:*:*4.3.3VulnerableApple
cpe:2.3:o:apple:iphone_os:4.3.5:*:*:*:*:*:*:*4.3.5VulnerableApple
cpe:2.3:o:apple:iphone_os:5.0:*:*:*:*:*:*:*5.0VulnerableApple
cpe:2.3:o:apple:iphone_os:5.0.1:*:*:*:*:*:*:*5.0.1VulnerableApple
cpe:2.3:o:apple:iphone_os:5.1:*:*:*:*:*:*:*5.1VulnerableApple
cpe:2.3:o:apple:iphone_os:5.1.1:*:*:*:*:*:*:*5.1.1VulnerableApple
cpe:2.3:o:apple:iphone_os:6.0:*:*:*:*:*:*:*6.0VulnerableApple
cpe:2.3:o:apple:iphone_os:6.0.1:*:*:*:*:*:*:*6.0.1VulnerableApple
cpe:2.3:o:apple:iphone_os:6.0.2:*:*:*:*:*:*:*6.0.2VulnerableApple
cpe:2.3:o:apple:iphone_os:6.1:*:*:*:*:*:*:*6.1VulnerableApple
cpe:2.3:o:apple:iphone_os:6.1.2:*:*:*:*:*:*:*6.1.2VulnerableApple
cpe:2.3:o:apple:iphone_os:6.1.3:*:*:*:*:*:*:*6.1.3VulnerableApple
cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*up to 21.0.1180.88VulnerableGoogle
cpe:2.3:a:google:chrome:21.0.1180.0:*:*:*:*:*:*:*21.0.1180.0VulnerableGoogle
cpe:2.3:a:google:chrome:21.0.1180.1:*:*:*:*:*:*:*21.0.1180.1VulnerableGoogle
cpe:2.3:a:google:chrome:21.0.1180.2:*:*:*:*:*:*:*21.0.1180.2VulnerableGoogle
cpe:2.3:a:google:chrome:21.0.1180.31:*:*:*:*:*:*:*21.0.1180.31VulnerableGoogle
cpe:2.3:a:google:chrome:21.0.1180.32:*:*:*:*:*:*:*21.0.1180.32VulnerableGoogle
cpe:2.3:a:google:chrome:21.0.1180.33:*:*:*:*:*:*:*21.0.1180.33VulnerableGoogle
cpe:2.3:a:google:chrome:21.0.1180.34:*:*:*:*:*:*:*21.0.1180.34VulnerableGoogle
cpe:2.3:a:google:chrome:21.0.1180.35:*:*:*:*:*:*:*21.0.1180.35VulnerableGoogle
cpe:2.3:a:google:chrome:21.0.1180.36:*:*:*:*:*:*:*21.0.1180.36VulnerableGoogle
cpe:2.3:a:google:chrome:21.0.1180.37:*:*:*:*:*:*:*21.0.1180.37VulnerableGoogle
cpe:2.3:a:google:chrome:21.0.1180.38:*:*:*:*:*:*:*21.0.1180.38VulnerableGoogle
cpe:2.3:a:google:chrome:21.0.1180.39:*:*:*:*:*:*:*21.0.1180.39VulnerableGoogle
cpe:2.3:a:google:chrome:21.0.1180.41:*:*:*:*:*:*:*21.0.1180.41VulnerableGoogle
cpe:2.3:a:google:chrome:21.0.1180.46:*:*:*:*:*:*:*21.0.1180.46VulnerableGoogle
cpe:2.3:a:google:chrome:21.0.1180.47:*:*:*:*:*:*:*21.0.1180.47VulnerableGoogle
cpe:2.3:a:google:chrome:21.0.1180.48:*:*:*:*:*:*:*21.0.1180.48VulnerableGoogle
cpe:2.3:a:google:chrome:21.0.1180.49:*:*:*:*:*:*:*21.0.1180.49VulnerableGoogle
cpe:2.3:a:google:chrome:21.0.1180.50:*:*:*:*:*:*:*21.0.1180.50VulnerableGoogle
cpe:2.3:a:google:chrome:21.0.1180.51:*:*:*:*:*:*:*21.0.1180.51VulnerableGoogle
cpe:2.3:a:google:chrome:21.0.1180.52:*:*:*:*:*:*:*21.0.1180.52VulnerableGoogle
cpe:2.3:a:google:chrome:21.0.1180.53:*:*:*:*:*:*:*21.0.1180.53VulnerableGoogle
cpe:2.3:a:google:chrome:21.0.1180.54:*:*:*:*:*:*:*21.0.1180.54VulnerableGoogle
cpe:2.3:a:google:chrome:21.0.1180.55:*:*:*:*:*:*:*21.0.1180.55VulnerableGoogle
cpe:2.3:a:google:chrome:21.0.1180.56:*:*:*:*:*:*:*21.0.1180.56VulnerableGoogle
cpe:2.3:a:google:chrome:21.0.1180.57:*:*:*:*:*:*:*21.0.1180.57VulnerableGoogle
cpe:2.3:a:google:chrome:21.0.1180.59:*:*:*:*:*:*:*21.0.1180.59VulnerableGoogle
cpe:2.3:a:google:chrome:21.0.1180.60:*:*:*:*:*:*:*21.0.1180.60VulnerableGoogle
cpe:2.3:a:google:chrome:21.0.1180.61:*:*:*:*:*:*:*21.0.1180.61VulnerableGoogle
cpe:2.3:a:google:chrome:21.0.1180.62:*:*:*:*:*:*:*21.0.1180.62VulnerableGoogle
cpe:2.3:a:google:chrome:21.0.1180.63:*:*:*:*:*:*:*21.0.1180.63VulnerableGoogle
cpe:2.3:a:google:chrome:21.0.1180.64:*:*:*:*:*:*:*21.0.1180.64VulnerableGoogle
cpe:2.3:a:google:chrome:21.0.1180.68:*:*:*:*:*:*:*21.0.1180.68VulnerableGoogle
cpe:2.3:a:google:chrome:21.0.1180.69:*:*:*:*:*:*:*21.0.1180.69VulnerableGoogle
cpe:2.3:a:google:chrome:21.0.1180.70:*:*:*:*:*:*:*21.0.1180.70VulnerableGoogle
cpe:2.3:a:google:chrome:21.0.1180.71:*:*:*:*:*:*:*21.0.1180.71VulnerableGoogle
cpe:2.3:a:google:chrome:21.0.1180.72:*:*:*:*:*:*:*21.0.1180.72VulnerableGoogle
cpe:2.3:a:google:chrome:21.0.1180.73:*:*:*:*:*:*:*21.0.1180.73VulnerableGoogle
cpe:2.3:a:google:chrome:21.0.1180.74:*:*:*:*:*:*:*21.0.1180.74VulnerableGoogle
cpe:2.3:a:google:chrome:21.0.1180.75:*:*:*:*:*:*:*21.0.1180.75VulnerableGoogle
cpe:2.3:a:google:chrome:21.0.1180.76:*:*:*:*:*:*:*21.0.1180.76VulnerableGoogle
cpe:2.3:a:google:chrome:21.0.1180.77:*:*:*:*:*:*:*21.0.1180.77VulnerableGoogle
cpe:2.3:a:google:chrome:21.0.1180.78:*:*:*:*:*:*:*21.0.1180.78VulnerableGoogle
cpe:2.3:a:google:chrome:21.0.1180.79:*:*:*:*:*:*:*21.0.1180.79VulnerableGoogle
cpe:2.3:a:google:chrome:21.0.1180.80:*:*:*:*:*:*:*21.0.1180.80VulnerableGoogle
cpe:2.3:a:google:chrome:21.0.1180.81:*:*:*:*:*:*:*21.0.1180.81VulnerableGoogle
cpe:2.3:a:google:chrome:21.0.1180.82:*:*:*:*:*:*:*21.0.1180.82VulnerableGoogle
cpe:2.3:a:google:chrome:21.0.1180.83:*:*:*:*:*:*:*21.0.1180.83VulnerableGoogle
cpe:2.3:a:google:chrome:21.0.1180.84:*:*:*:*:*:*:*21.0.1180.84VulnerableGoogle
cpe:2.3:a:google:chrome:21.0.1180.85:*:*:*:*:*:*:*21.0.1180.85VulnerableGoogle
cpe:2.3:a:google:chrome:21.0.1180.86:*:*:*:*:*:*:*21.0.1180.86VulnerableGoogle
cpe:2.3:a:google:chrome:21.0.1180.87:*:*:*:*:*:*:*21.0.1180.87VulnerableGoogle
cpe:2.3:a:xmlsoft:libxslt:*:*:*:*:*:*:*:*up to 1.1.26Vulnerablexmlsoft
cpe:2.3:a:xmlsoft:libxslt:1.1.8:*:*:*:*:*:*:*1.1.8Vulnerablexmlsoft
cpe:2.3:a:xmlsoft:libxslt:1.1.9:*:*:*:*:*:*:*1.1.9Vulnerablexmlsoft
cpe:2.3:a:xmlsoft:libxslt:1.1.10:*:*:*:*:*:*:*1.1.10Vulnerablexmlsoft
cpe:2.3:a:xmlsoft:libxslt:1.1.11:*:*:*:*:*:*:*1.1.11Vulnerablexmlsoft
cpe:2.3:a:xmlsoft:libxslt:1.1.12:*:*:*:*:*:*:*1.1.12Vulnerablexmlsoft
cpe:2.3:a:xmlsoft:libxslt:1.1.13:*:*:*:*:*:*:*1.1.13Vulnerablexmlsoft
cpe:2.3:a:xmlsoft:libxslt:1.1.14:*:*:*:*:*:*:*1.1.14Vulnerablexmlsoft
cpe:2.3:a:xmlsoft:libxslt:1.1.15:*:*:*:*:*:*:*1.1.15Vulnerablexmlsoft
cpe:2.3:a:xmlsoft:libxslt:1.1.16:*:*:*:*:*:*:*1.1.16Vulnerablexmlsoft
cpe:2.3:a:xmlsoft:libxslt:1.1.17:*:*:*:*:*:*:*1.1.17Vulnerablexmlsoft
cpe:2.3:a:xmlsoft:libxslt:1.1.18:*:*:*:*:*:*:*1.1.18Vulnerablexmlsoft
cpe:2.3:a:xmlsoft:libxslt:1.1.19:*:*:*:*:*:*:*1.1.19Vulnerablexmlsoft
cpe:2.3:a:xmlsoft:libxslt:1.1.20:*:*:*:*:*:*:*1.1.20Vulnerablexmlsoft
cpe:2.3:a:xmlsoft:libxslt:1.1.21:*:*:*:*:*:*:*1.1.21Vulnerablexmlsoft
cpe:2.3:a:xmlsoft:libxslt:1.1.22:*:*:*:*:*:*:*1.1.22Vulnerablexmlsoft
cpe:2.3:a:xmlsoft:libxslt:1.1.23:*:*:*:*:*:*:*1.1.23Vulnerablexmlsoft
cpe:2.3:a:xmlsoft:libxslt:1.1.24:*:*:*:*:*:*:*1.1.24Vulnerablexmlsoft
  • cpe:2.3:o:apple:iphone_os:2.0:*:*:*:*:*:*:* Versions 2.0 Vulnerable ·Apple
  • cpe:2.3:o:apple:iphone_os:2.0.0:*:*:*:*:*:*:* Versions 2.0.0 Vulnerable ·Apple
  • cpe:2.3:o:apple:iphone_os:2.0.1:*:*:*:*:*:*:* Versions 2.0.1 Vulnerable ·Apple
  • cpe:2.3:o:apple:iphone_os:2.0.2:*:*:*:*:*:*:* Versions 2.0.2 Vulnerable ·Apple
  • cpe:2.3:o:apple:iphone_os:2.1:*:*:*:*:*:*:* Versions 2.1 Vulnerable ·Apple
  • cpe:2.3:o:apple:iphone_os:2.1.1:*:*:*:*:*:*:* Versions 2.1.1 Vulnerable ·Apple
  • cpe:2.3:o:apple:iphone_os:2.2:*:*:*:*:*:*:* Versions 2.2 Vulnerable ·Apple
  • cpe:2.3:o:apple:iphone_os:2.2.1:*:*:*:*:*:*:* Versions 2.2.1 Vulnerable ·Apple
  • cpe:2.3:o:apple:iphone_os:3.0:*:*:*:*:*:*:* Versions 3.0 Vulnerable ·Apple
  • cpe:2.3:o:apple:iphone_os:3.0.1:*:*:*:*:*:*:* Versions 3.0.1 Vulnerable ·Apple
  • cpe:2.3:o:apple:iphone_os:3.1:*:*:*:*:*:*:* Versions 3.1 Vulnerable ·Apple
  • cpe:2.3:o:apple:iphone_os:3.1.2:*:*:*:*:*:*:* Versions 3.1.2 Vulnerable ·Apple
  • cpe:2.3:o:apple:iphone_os:3.1.3:*:*:*:*:*:*:* Versions 3.1.3 Vulnerable ·Apple
  • cpe:2.3:o:apple:iphone_os:3.2:*:*:*:*:*:*:* Versions 3.2 Vulnerable ·Apple
  • cpe:2.3:o:apple:iphone_os:3.2.1:*:*:*:*:*:*:* Versions 3.2.1 Vulnerable ·Apple
  • cpe:2.3:o:apple:iphone_os:3.2.2:*:*:*:*:*:*:* Versions 3.2.2 Vulnerable ·Apple
  • cpe:2.3:o:apple:iphone_os:4.0:*:*:*:*:*:*:* Versions 4.0 Vulnerable ·Apple
  • cpe:2.3:o:apple:iphone_os:4.0.1:*:*:*:*:*:*:* Versions 4.0.1 Vulnerable ·Apple
  • cpe:2.3:o:apple:iphone_os:4.0.2:*:*:*:*:*:*:* Versions 4.0.2 Vulnerable ·Apple
  • cpe:2.3:o:apple:iphone_os:4.1:*:*:*:*:*:*:* Versions 4.1 Vulnerable ·Apple
  • cpe:2.3:o:apple:iphone_os:4.2.1:*:*:*:*:*:*:* Versions 4.2.1 Vulnerable ·Apple
  • cpe:2.3:o:apple:iphone_os:4.2.5:*:*:*:*:*:*:* Versions 4.2.5 Vulnerable ·Apple
  • cpe:2.3:o:apple:iphone_os:4.2.8:*:*:*:*:*:*:* Versions 4.2.8 Vulnerable ·Apple
  • cpe:2.3:o:apple:iphone_os:4.3.0:*:*:*:*:*:*:* Versions 4.3.0 Vulnerable ·Apple
  • cpe:2.3:o:apple:iphone_os:4.3.1:*:*:*:*:*:*:* Versions 4.3.1 Vulnerable ·Apple
  • cpe:2.3:o:apple:iphone_os:4.3.2:*:*:*:*:*:*:* Versions 4.3.2 Vulnerable ·Apple
  • cpe:2.3:o:apple:iphone_os:4.3.3:*:*:*:*:*:*:* Versions 4.3.3 Vulnerable ·Apple
  • cpe:2.3:o:apple:iphone_os:4.3.5:*:*:*:*:*:*:* Versions 4.3.5 Vulnerable ·Apple
  • cpe:2.3:o:apple:iphone_os:5.0:*:*:*:*:*:*:* Versions 5.0 Vulnerable ·Apple
  • cpe:2.3:o:apple:iphone_os:5.0.1:*:*:*:*:*:*:* Versions 5.0.1 Vulnerable ·Apple
  • cpe:2.3:o:apple:iphone_os:5.1:*:*:*:*:*:*:* Versions 5.1 Vulnerable ·Apple
  • cpe:2.3:o:apple:iphone_os:5.1.1:*:*:*:*:*:*:* Versions 5.1.1 Vulnerable ·Apple
  • cpe:2.3:o:apple:iphone_os:6.0:*:*:*:*:*:*:* Versions 6.0 Vulnerable ·Apple
  • cpe:2.3:o:apple:iphone_os:6.0.1:*:*:*:*:*:*:* Versions 6.0.1 Vulnerable ·Apple
  • cpe:2.3:o:apple:iphone_os:6.0.2:*:*:*:*:*:*:* Versions 6.0.2 Vulnerable ·Apple
  • cpe:2.3:o:apple:iphone_os:6.1:*:*:*:*:*:*:* Versions 6.1 Vulnerable ·Apple
  • cpe:2.3:o:apple:iphone_os:6.1.2:*:*:*:*:*:*:* Versions 6.1.2 Vulnerable ·Apple
  • cpe:2.3:o:apple:iphone_os:6.1.3:*:*:*:*:*:*:* Versions 6.1.3 Vulnerable ·Apple
  • cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:* Versions up to 21.0.1180.88 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:21.0.1180.0:*:*:*:*:*:*:* Versions 21.0.1180.0 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:21.0.1180.1:*:*:*:*:*:*:* Versions 21.0.1180.1 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:21.0.1180.2:*:*:*:*:*:*:* Versions 21.0.1180.2 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:21.0.1180.31:*:*:*:*:*:*:* Versions 21.0.1180.31 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:21.0.1180.32:*:*:*:*:*:*:* Versions 21.0.1180.32 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:21.0.1180.33:*:*:*:*:*:*:* Versions 21.0.1180.33 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:21.0.1180.34:*:*:*:*:*:*:* Versions 21.0.1180.34 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:21.0.1180.35:*:*:*:*:*:*:* Versions 21.0.1180.35 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:21.0.1180.36:*:*:*:*:*:*:* Versions 21.0.1180.36 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:21.0.1180.37:*:*:*:*:*:*:* Versions 21.0.1180.37 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:21.0.1180.38:*:*:*:*:*:*:* Versions 21.0.1180.38 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:21.0.1180.39:*:*:*:*:*:*:* Versions 21.0.1180.39 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:21.0.1180.41:*:*:*:*:*:*:* Versions 21.0.1180.41 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:21.0.1180.46:*:*:*:*:*:*:* Versions 21.0.1180.46 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:21.0.1180.47:*:*:*:*:*:*:* Versions 21.0.1180.47 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:21.0.1180.48:*:*:*:*:*:*:* Versions 21.0.1180.48 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:21.0.1180.49:*:*:*:*:*:*:* Versions 21.0.1180.49 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:21.0.1180.50:*:*:*:*:*:*:* Versions 21.0.1180.50 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:21.0.1180.51:*:*:*:*:*:*:* Versions 21.0.1180.51 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:21.0.1180.52:*:*:*:*:*:*:* Versions 21.0.1180.52 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:21.0.1180.53:*:*:*:*:*:*:* Versions 21.0.1180.53 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:21.0.1180.54:*:*:*:*:*:*:* Versions 21.0.1180.54 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:21.0.1180.55:*:*:*:*:*:*:* Versions 21.0.1180.55 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:21.0.1180.56:*:*:*:*:*:*:* Versions 21.0.1180.56 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:21.0.1180.57:*:*:*:*:*:*:* Versions 21.0.1180.57 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:21.0.1180.59:*:*:*:*:*:*:* Versions 21.0.1180.59 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:21.0.1180.60:*:*:*:*:*:*:* Versions 21.0.1180.60 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:21.0.1180.61:*:*:*:*:*:*:* Versions 21.0.1180.61 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:21.0.1180.62:*:*:*:*:*:*:* Versions 21.0.1180.62 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:21.0.1180.63:*:*:*:*:*:*:* Versions 21.0.1180.63 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:21.0.1180.64:*:*:*:*:*:*:* Versions 21.0.1180.64 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:21.0.1180.68:*:*:*:*:*:*:* Versions 21.0.1180.68 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:21.0.1180.69:*:*:*:*:*:*:* Versions 21.0.1180.69 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:21.0.1180.70:*:*:*:*:*:*:* Versions 21.0.1180.70 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:21.0.1180.71:*:*:*:*:*:*:* Versions 21.0.1180.71 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:21.0.1180.72:*:*:*:*:*:*:* Versions 21.0.1180.72 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:21.0.1180.73:*:*:*:*:*:*:* Versions 21.0.1180.73 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:21.0.1180.74:*:*:*:*:*:*:* Versions 21.0.1180.74 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:21.0.1180.75:*:*:*:*:*:*:* Versions 21.0.1180.75 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:21.0.1180.76:*:*:*:*:*:*:* Versions 21.0.1180.76 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:21.0.1180.77:*:*:*:*:*:*:* Versions 21.0.1180.77 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:21.0.1180.78:*:*:*:*:*:*:* Versions 21.0.1180.78 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:21.0.1180.79:*:*:*:*:*:*:* Versions 21.0.1180.79 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:21.0.1180.80:*:*:*:*:*:*:* Versions 21.0.1180.80 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:21.0.1180.81:*:*:*:*:*:*:* Versions 21.0.1180.81 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:21.0.1180.82:*:*:*:*:*:*:* Versions 21.0.1180.82 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:21.0.1180.83:*:*:*:*:*:*:* Versions 21.0.1180.83 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:21.0.1180.84:*:*:*:*:*:*:* Versions 21.0.1180.84 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:21.0.1180.85:*:*:*:*:*:*:* Versions 21.0.1180.85 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:21.0.1180.86:*:*:*:*:*:*:* Versions 21.0.1180.86 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:21.0.1180.87:*:*:*:*:*:*:* Versions 21.0.1180.87 Vulnerable ·Google
  • cpe:2.3:a:xmlsoft:libxslt:*:*:*:*:*:*:*:* Versions up to 1.1.26 Vulnerable ·xmlsoft
  • cpe:2.3:a:xmlsoft:libxslt:1.1.8:*:*:*:*:*:*:* Versions 1.1.8 Vulnerable ·xmlsoft
  • cpe:2.3:a:xmlsoft:libxslt:1.1.9:*:*:*:*:*:*:* Versions 1.1.9 Vulnerable ·xmlsoft
  • cpe:2.3:a:xmlsoft:libxslt:1.1.10:*:*:*:*:*:*:* Versions 1.1.10 Vulnerable ·xmlsoft
  • cpe:2.3:a:xmlsoft:libxslt:1.1.11:*:*:*:*:*:*:* Versions 1.1.11 Vulnerable ·xmlsoft
  • cpe:2.3:a:xmlsoft:libxslt:1.1.12:*:*:*:*:*:*:* Versions 1.1.12 Vulnerable ·xmlsoft
  • cpe:2.3:a:xmlsoft:libxslt:1.1.13:*:*:*:*:*:*:* Versions 1.1.13 Vulnerable ·xmlsoft
  • cpe:2.3:a:xmlsoft:libxslt:1.1.14:*:*:*:*:*:*:* Versions 1.1.14 Vulnerable ·xmlsoft
  • cpe:2.3:a:xmlsoft:libxslt:1.1.15:*:*:*:*:*:*:* Versions 1.1.15 Vulnerable ·xmlsoft
  • cpe:2.3:a:xmlsoft:libxslt:1.1.16:*:*:*:*:*:*:* Versions 1.1.16 Vulnerable ·xmlsoft
  • cpe:2.3:a:xmlsoft:libxslt:1.1.17:*:*:*:*:*:*:* Versions 1.1.17 Vulnerable ·xmlsoft
  • cpe:2.3:a:xmlsoft:libxslt:1.1.18:*:*:*:*:*:*:* Versions 1.1.18 Vulnerable ·xmlsoft
  • cpe:2.3:a:xmlsoft:libxslt:1.1.19:*:*:*:*:*:*:* Versions 1.1.19 Vulnerable ·xmlsoft
  • cpe:2.3:a:xmlsoft:libxslt:1.1.20:*:*:*:*:*:*:* Versions 1.1.20 Vulnerable ·xmlsoft
  • cpe:2.3:a:xmlsoft:libxslt:1.1.21:*:*:*:*:*:*:* Versions 1.1.21 Vulnerable ·xmlsoft
  • cpe:2.3:a:xmlsoft:libxslt:1.1.22:*:*:*:*:*:*:* Versions 1.1.22 Vulnerable ·xmlsoft
  • cpe:2.3:a:xmlsoft:libxslt:1.1.23:*:*:*:*:*:*:* Versions 1.1.23 Vulnerable ·xmlsoft
  • cpe:2.3:a:xmlsoft:libxslt:1.1.24:*:*:*:*:*:*:* Versions 1.1.24 Vulnerable ·xmlsoft

Remediation

Red Hat 1 advisory

  • RHSA-2012:1265 Released 2012-09-13 · Red Hat rating Important
    libxslt security update
    • RHEL Desktop Workstation (v. 5 client) libxslt-1.1.17-4.el5_8.3, libxslt-devel-1.1.17-4.el5_8.3, libxslt-devel-1.1.17-4.el5_8.3.i386
    • Red Hat Enterprise Linux (v. 5 server) libxslt-1.1.17-4.el5_8.3, libxslt-1.1.17-4.el5_8.3.i386, libxslt-1.1.17-4.el5_8.3.ia64 +9
    • Red Hat Enterprise Linux Desktop (v. 5 client) libxslt-1.1.17-4.el5_8.3, libxslt-1.1.17-4.el5_8.3.i386, libxslt-python-1.1.17-4.el5_8.3 +1
    • Red Hat Enterprise Linux Desktop (v. 6) libxslt-1.1.26-2.el6_3.1
    • Red Hat Enterprise Linux Desktop Optional (v. 6) libxslt-1.1.26-2.el6_3.1, libxslt-devel-1.1.26-2.el6_3.1, libxslt-python-1.1.26-2.el6_3.1
    • Red Hat Enterprise Linux HPC Node (v. 6) libxslt-1.1.26-2.el6_3.1
    • Red Hat Enterprise Linux HPC Node Optional (v. 6) libxslt-1.1.26-2.el6_3.1, libxslt-devel-1.1.26-2.el6_3.1, libxslt-python-1.1.26-2.el6_3.1
    • Red Hat Enterprise Linux Server (v. 6) libxslt-1.1.26-2.el6_3.1, libxslt-1.1.26-2.el6_3.1.ppc, libxslt-devel-1.1.26-2.el6_3.1 +1
    • Red Hat Enterprise Linux Server Optional (v. 6) libxslt-1.1.26-2.el6_3.1, libxslt-python-1.1.26-2.el6_3.1
    • Red Hat Enterprise Linux Workstation (v. 6) libxslt-1.1.26-2.el6_3.1, libxslt-devel-1.1.26-2.el6_3.1
    • Red Hat Enterprise Linux Workstation Optional (v. 6) libxslt-1.1.26-2.el6_3.1, libxslt-python-1.1.26-2.el6_3.1

Vendor assessments

Red Hat

Red Hat rating: Low. Red Hat's page for this CVE →

ProductStatusPlan or fix
RHEL Desktop Workstation (v. 5 client)Fixed RHSA-2012:1265
Red Hat Enterprise Linux (v. 5 server)Fixed RHSA-2012:1265
Red Hat Enterprise Linux Desktop (v. 5 client)Fixed RHSA-2012:1265
Red Hat Enterprise Linux Desktop (v. 6)Fixed RHSA-2012:1265
Red Hat Enterprise Linux Desktop Optional (v. 6)Fixed RHSA-2012:1265
Red Hat Enterprise Linux HPC Node (v. 6)Fixed RHSA-2012:1265
Red Hat Enterprise Linux HPC Node Optional (v. 6)Fixed RHSA-2012:1265
Red Hat Enterprise Linux Server (v. 6)Fixed RHSA-2012:1265
Red Hat Enterprise Linux Server Optional (v. 6)Fixed RHSA-2012:1265
Red Hat Enterprise Linux Workstation (v. 6)Fixed RHSA-2012:1265
Red Hat Enterprise Linux Workstation Optional (v. 6)Fixed RHSA-2012:1265

Timeline

  1. 2026-10-02 Threatist record created from CVE-2012-2870
  2. 2026-10-03 Alias added: GHSA-3g6j-g63v-rg6h

References

Advisory 5

Other 11

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences