• Introduction
• Supported version
• Command line
• Identification strings
• Known parser bugs
• Special features
• File creation
• Cryptographic functions

Introduction

libxslt is a C based XSLT engine developed for the GNOME project.

Supported version

1.0

Command line

$> xsltproc foo.xsl foo.xml

Identification strings

Known parser bugs

• Wild read CVE-2012-2825
• Medium CVE-2012-2825: Wild read in XSL handling. Credit to Nicholas Gregoire.
• [110277] Medium CVE-2011-3970: Out-of-bounds read in libxslt. Credit to Aki Helin of OUSPG.

[129930] High CVE-2012-2807: Integer overflows in libxml. Credit to Jüri Aedla.
[125462] High CVE-2011-3102: Off-by-one out-of-bounds write in libxml. Credit to Jüri Aedla.
[107128] High CVE-2011-3919: Heap-buffer-overflow in libxml. Credit to Jüri Aedla.
[95465] Low CVE-2011-3905: Out-of-bounds reads in libxml. Credit to Google Chrome Security Team (Inferno)
[93472] High CVE-2011-2834: Double free in libxml XPath handling. Credit to Yang Dingning from NCNIPC, Graduate University of Chinese Academy of Sciences.
[89402] High CVE-2011-2821: Double free in libxml XPath handling. Credit to Yang Dingning from NCNIPC, Graduate University of Chinese Academy of Sciences.

Special features

• File creation
• Cryptographic functions

File creation

Several functions, associated at different namespaces, allow to create files on the engine side. They're all aliases to the xsltDocumentElem() function defined in libxslt/transform.c. The content written to the file must be valid UTF-8 (so plain ASCII works too). Existing files can be overwritten. 

Note : The first line uses the standard XSLT namespace, which is always available.

Cryptographic functions