| Package | Affected versions | Patched versions |
|---|---|---|
| chrome | = 21.0.1180.0= 21.0.1180.1= 21.0.1180.2= 21.0.1180.31= 21.0.1180.32= 21.0.1180.33= 21.0.1180.34= 21.0.1180.35= 21.0.1180.36= 21.0.1180.37= 21.0.1180.38= 21.0.1180.39= 21.0.1180.41= 21.0.1180.46= 21.0.1180.47= 21.0.1180.48= 21.0.1180.49= 21.0.1180.50= 21.0.1180.51= 21.0.1180.52= 21.0.1180.53= 21.0.1180.54= 21.0.1180.55= 21.0.1180.56= 21.0.1180.57= 21.0.1180.59= 21.0.1180.60= 21.0.1180.61= 21.0.1180.62= 21.0.1180.63= 21.0.1180.64= 21.0.1180.68= 21.0.1180.69= 21.0.1180.70= 21.0.1180.71= 21.0.1180.72= 21.0.1180.73= 21.0.1180.74= 21.0.1180.75= 21.0.1180.76= 21.0.1180.77= 21.0.1180.78= 21.0.1180.79= 21.0.1180.80= 21.0.1180.81= 21.0.1180.82= 21.0.1180.83= 21.0.1180.84= 21.0.1180.85= 21.0.1180.86= 21.0.1180.87≤ 21.0.1180.88 | |
| libxslt | = 1.1.10= 1.1.11= 1.1.12= 1.1.13= 1.1.14= 1.1.15= 1.1.16= 1.1.17= 1.1.18= 1.1.19= 1.1.20= 1.1.21= 1.1.22= 1.1.23= 1.1.24= 1.1.8= 1.1.9≤ 1.1.26 |
libxslt 1.1.26 and earlier, as used in Google Chrome before 21.0.1180.89, does not properly manage memory, which might allow remote attackers to cause a denial of service (application crash) via a crafted XSLT expression that is not properly identified during XPath navigation, related to (1) the xsltCompileLocationPathPattern function in libxslt/pattern.c and (2) the xsltGenerateIdFunction function in libxslt/functions.c.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free