CVE-2015-7995

概要

参考情報

• lists.apple.com/archives/security-announce/2016/Jan/msg00002.html · Vendor Advisory
• lists.apple.com/archives/security-announce/2016/Jan/msg00003.html · Vendor Advisory
• lists.apple.com/archives/security-announce/2016/Jan/msg00005.html · Vendor Advisory
• lists.apple.com/archives/security-announce/2016/Mar/msg00001.html
• lists.opensuse.org/opensuse-updates/2016-05/msg00123.html
• debian.org/security/2016/dsa-3605
• openwall.com/lists/oss-security/2015/10/27/10
• openwall.com/lists/oss-security/2015/10/28/4
• oracle.com/technetwork/topics/security/bulletinjan2016-2867206.html
• securityfocus.com/bid/77325
• securitytracker.com/id/1034736
• securitytracker.com/id/1038623
• slackware.com/security/viewer.php
• bugzilla.redhat.com/show_bug.cgi · Exploit
• git.gnome.org/browse/libxslt/commit
• h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay
• h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay
• puppet.com/security/cve/cve-2015-7995
• support.apple.com/HT205729
• support.apple.com/HT205731
• support.apple.com/HT205732
• support.apple.com/HT206168 · Vendor Advisory

libxslt のその他の脆弱性

• CVE-2025-24855高 7.8numbers.c in libxslt before 1.1.43 has a use-after-free because, in nested XPath evaluations, an XPath context node can be modified but neve…
• CVE-2024-55549高 7.8xsltGetInheritedNsList in libxslt before 1.1.43 has a use-after-free issue related to exclusion of result prefixes.
• CVE-2022-29824中 6.5In libxml2 before 2.9.14, several buffer handling functions in buf.c (xmlBuf*) and tree.c (xmlBuffer*) don't check for integer overflows. Th…
• CVE-2021-30560高 8.8Use after free in Blink XSLT in Google Chrome prior to 91.0.4472.164 allowed a remote attacker to potentially exploit heap corruption via a …
• CVE-2019-5815高 7.5Type confusion in xsltNumberFormatGetMultipleLevel prior to libxslt 1.1.33 could allow attackers to potentially exploit heap corruption via …