CVE-2011-1425
Apple Safari Webkit - libxslt Arbitrary File Creation
Severity Score
7.5
*CVSS v3
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
1
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
xslt.c in XML Security Library (aka xmlsec) before 1.2.17, as used in WebKit and other products, when XSLT is enabled, allows remote attackers to create or overwrite arbitrary files via vectors involving the libxslt output extension and a ds:Transform element during signature verification.
xslt.c en XML Security Library (también conocido como xmlsec)anterior a v1.2.17 como se usaba en WebKit y otros productos, cuando XSLT es habilitado, permite a atacantes remotos crear o sobreescribir archivos de su elección a través de vectores que involucran la extensión de salida libxslt y un elemento ds:Transform durante la verificación de firma.
This GLSA contains notification of vulnerabilities found in several Gentoo packages which have been fixed prior to January 1, 2012. The worst of these vulnerabilities could lead to local privilege escalation and remote code execution.
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2011-03-14 CVE Reserved
- 2011-04-03 CVE Published
- 2011-10-18 First Exploit
- 2024-08-06 CVE Updated
- 2025-03-30 EPSS Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
CWE
- CWE-264: Permissions, Privileges, and Access Controls
CAPEC
References (21)
| URL | Tag | Source |
|---|---|---|
| http://secunia.com/advisories/44167 | Third Party Advisory | |
| http://secunia.com/advisories/44423 | Third Party Advisory | |
| http://trac.webkit.org/changeset/79159 | X_refsource_confirm | |
| http://www.securityfocus.com/bid/47135 | Vdb Entry | |
| http://www.securitytracker.com/id?1025284 | Vdb Entry | |
| http://www.vupen.com/english/advisories/2011/0855 | Vdb Entry | |
| http://www.vupen.com/english/advisories/2011/0858 | Vdb Entry | |
| http://www.vupen.com/english/advisories/2011/1010 | Vdb Entry | |
| http://www.vupen.com/english/advisories/2011/1172 | Vdb Entry | |
| https://bugs.webkit.org/show_bug.cgi?id=52688 | X_refsource_confirm | |
| https://exchange.xforce.ibmcloud.com/vulnerabilities/66506 | Vdb Entry |
| URL | Date | SRC |
|---|---|---|
| https://www.exploit-db.com/exploits/17993 | 2011-10-18 |
| URL | Date | SRC |
|---|---|---|
| http://secunia.com/advisories/43920 | 2017-08-17 | |
| http://www.debian.org/security/2011/dsa-2219 | 2017-08-17 | |
| http://www.mandriva.com/security/advisories?name=MDVSA-2011:063 | 2017-08-17 | |
| http://www.redhat.com/support/errata/RHSA-2011-0486.html | 2017-08-17 | |
| https://access.redhat.com/security/cve/CVE-2011-1425 | 2011-05-04 |
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Aleksey Search vendor "Aleksey" | Xml Security Library Search vendor "Aleksey" for product "Xml Security Library" | <= 1.2.16 Search vendor "Aleksey" for product "Xml Security Library" and version " <= 1.2.16" | - |
Affected
| ||||||
| Aleksey Search vendor "Aleksey" | Xml Security Library Search vendor "Aleksey" for product "Xml Security Library" | 0.0.1 Search vendor "Aleksey" for product "Xml Security Library" and version "0.0.1" | - |
Affected
| ||||||
| Aleksey Search vendor "Aleksey" | Xml Security Library Search vendor "Aleksey" for product "Xml Security Library" | 0.0.2 Search vendor "Aleksey" for product "Xml Security Library" and version "0.0.2" | - |
Affected
| ||||||
| Aleksey Search vendor "Aleksey" | Xml Security Library Search vendor "Aleksey" for product "Xml Security Library" | 0.0.2a Search vendor "Aleksey" for product "Xml Security Library" and version "0.0.2a" | - |
Affected
| ||||||
| Aleksey Search vendor "Aleksey" | Xml Security Library Search vendor "Aleksey" for product "Xml Security Library" | 0.0.3 Search vendor "Aleksey" for product "Xml Security Library" and version "0.0.3" | - |
Affected
| ||||||
| Aleksey Search vendor "Aleksey" | Xml Security Library Search vendor "Aleksey" for product "Xml Security Library" | 0.0.4 Search vendor "Aleksey" for product "Xml Security Library" and version "0.0.4" | - |
Affected
| ||||||
| Aleksey Search vendor "Aleksey" | Xml Security Library Search vendor "Aleksey" for product "Xml Security Library" | 0.0.5 Search vendor "Aleksey" for product "Xml Security Library" and version "0.0.5" | - |
Affected
| ||||||
| Aleksey Search vendor "Aleksey" | Xml Security Library Search vendor "Aleksey" for product "Xml Security Library" | 0.0.6 Search vendor "Aleksey" for product "Xml Security Library" and version "0.0.6" | - |
Affected
| ||||||
| Aleksey Search vendor "Aleksey" | Xml Security Library Search vendor "Aleksey" for product "Xml Security Library" | 0.0.7 Search vendor "Aleksey" for product "Xml Security Library" and version "0.0.7" | - |
Affected
| ||||||
| Aleksey Search vendor "Aleksey" | Xml Security Library Search vendor "Aleksey" for product "Xml Security Library" | 0.0.8 Search vendor "Aleksey" for product "Xml Security Library" and version "0.0.8" | - |
Affected
| ||||||
| Aleksey Search vendor "Aleksey" | Xml Security Library Search vendor "Aleksey" for product "Xml Security Library" | 0.0.9 Search vendor "Aleksey" for product "Xml Security Library" and version "0.0.9" | - |
Affected
| ||||||
| Aleksey Search vendor "Aleksey" | Xml Security Library Search vendor "Aleksey" for product "Xml Security Library" | 0.0.10 Search vendor "Aleksey" for product "Xml Security Library" and version "0.0.10" | - |
Affected
| ||||||
| Aleksey Search vendor "Aleksey" | Xml Security Library Search vendor "Aleksey" for product "Xml Security Library" | 0.0.11 Search vendor "Aleksey" for product "Xml Security Library" and version "0.0.11" | - |
Affected
| ||||||
| Aleksey Search vendor "Aleksey" | Xml Security Library Search vendor "Aleksey" for product "Xml Security Library" | 0.0.12 Search vendor "Aleksey" for product "Xml Security Library" and version "0.0.12" | - |
Affected
| ||||||
| Aleksey Search vendor "Aleksey" | Xml Security Library Search vendor "Aleksey" for product "Xml Security Library" | 0.0.13 Search vendor "Aleksey" for product "Xml Security Library" and version "0.0.13" | - |
Affected
| ||||||
| Aleksey Search vendor "Aleksey" | Xml Security Library Search vendor "Aleksey" for product "Xml Security Library" | 0.0.14 Search vendor "Aleksey" for product "Xml Security Library" and version "0.0.14" | - |
Affected
| ||||||
| Aleksey Search vendor "Aleksey" | Xml Security Library Search vendor "Aleksey" for product "Xml Security Library" | 0.0.15 Search vendor "Aleksey" for product "Xml Security Library" and version "0.0.15" | - |
Affected
| ||||||
| Aleksey Search vendor "Aleksey" | Xml Security Library Search vendor "Aleksey" for product "Xml Security Library" | 0.1.0 Search vendor "Aleksey" for product "Xml Security Library" and version "0.1.0" | - |
Affected
| ||||||
| Aleksey Search vendor "Aleksey" | Xml Security Library Search vendor "Aleksey" for product "Xml Security Library" | 0.1.1 Search vendor "Aleksey" for product "Xml Security Library" and version "0.1.1" | - |
Affected
| ||||||
| Aleksey Search vendor "Aleksey" | Xml Security Library Search vendor "Aleksey" for product "Xml Security Library" | 1.0.0 Search vendor "Aleksey" for product "Xml Security Library" and version "1.0.0" | - |
Affected
| ||||||
| Aleksey Search vendor "Aleksey" | Xml Security Library Search vendor "Aleksey" for product "Xml Security Library" | 1.0.0 Search vendor "Aleksey" for product "Xml Security Library" and version "1.0.0" | rc1 |
Affected
| ||||||
| Aleksey Search vendor "Aleksey" | Xml Security Library Search vendor "Aleksey" for product "Xml Security Library" | 1.0.1 Search vendor "Aleksey" for product "Xml Security Library" and version "1.0.1" | - |
Affected
| ||||||
| Aleksey Search vendor "Aleksey" | Xml Security Library Search vendor "Aleksey" for product "Xml Security Library" | 1.0.2 Search vendor "Aleksey" for product "Xml Security Library" and version "1.0.2" | - |
Affected
| ||||||
| Aleksey Search vendor "Aleksey" | Xml Security Library Search vendor "Aleksey" for product "Xml Security Library" | 1.0.3 Search vendor "Aleksey" for product "Xml Security Library" and version "1.0.3" | - |
Affected
| ||||||
| Aleksey Search vendor "Aleksey" | Xml Security Library Search vendor "Aleksey" for product "Xml Security Library" | 1.0.4 Search vendor "Aleksey" for product "Xml Security Library" and version "1.0.4" | - |
Affected
| ||||||
| Aleksey Search vendor "Aleksey" | Xml Security Library Search vendor "Aleksey" for product "Xml Security Library" | 1.1.0 Search vendor "Aleksey" for product "Xml Security Library" and version "1.1.0" | - |
Affected
| ||||||
| Aleksey Search vendor "Aleksey" | Xml Security Library Search vendor "Aleksey" for product "Xml Security Library" | 1.1.1 Search vendor "Aleksey" for product "Xml Security Library" and version "1.1.1" | - |
Affected
| ||||||
| Aleksey Search vendor "Aleksey" | Xml Security Library Search vendor "Aleksey" for product "Xml Security Library" | 1.1.2 Search vendor "Aleksey" for product "Xml Security Library" and version "1.1.2" | - |
Affected
| ||||||
| Aleksey Search vendor "Aleksey" | Xml Security Library Search vendor "Aleksey" for product "Xml Security Library" | 1.2.0 Search vendor "Aleksey" for product "Xml Security Library" and version "1.2.0" | - |
Affected
| ||||||
| Aleksey Search vendor "Aleksey" | Xml Security Library Search vendor "Aleksey" for product "Xml Security Library" | 1.2.1 Search vendor "Aleksey" for product "Xml Security Library" and version "1.2.1" | - |
Affected
| ||||||
| Aleksey Search vendor "Aleksey" | Xml Security Library Search vendor "Aleksey" for product "Xml Security Library" | 1.2.2 Search vendor "Aleksey" for product "Xml Security Library" and version "1.2.2" | - |
Affected
| ||||||
| Aleksey Search vendor "Aleksey" | Xml Security Library Search vendor "Aleksey" for product "Xml Security Library" | 1.2.3 Search vendor "Aleksey" for product "Xml Security Library" and version "1.2.3" | - |
Affected
| ||||||
| Aleksey Search vendor "Aleksey" | Xml Security Library Search vendor "Aleksey" for product "Xml Security Library" | 1.2.4 Search vendor "Aleksey" for product "Xml Security Library" and version "1.2.4" | - |
Affected
| ||||||
| Aleksey Search vendor "Aleksey" | Xml Security Library Search vendor "Aleksey" for product "Xml Security Library" | 1.2.5 Search vendor "Aleksey" for product "Xml Security Library" and version "1.2.5" | - |
Affected
| ||||||
| Aleksey Search vendor "Aleksey" | Xml Security Library Search vendor "Aleksey" for product "Xml Security Library" | 1.2.6 Search vendor "Aleksey" for product "Xml Security Library" and version "1.2.6" | - |
Affected
| ||||||
| Aleksey Search vendor "Aleksey" | Xml Security Library Search vendor "Aleksey" for product "Xml Security Library" | 1.2.7 Search vendor "Aleksey" for product "Xml Security Library" and version "1.2.7" | - |
Affected
| ||||||
| Aleksey Search vendor "Aleksey" | Xml Security Library Search vendor "Aleksey" for product "Xml Security Library" | 1.2.8 Search vendor "Aleksey" for product "Xml Security Library" and version "1.2.8" | - |
Affected
| ||||||
| Aleksey Search vendor "Aleksey" | Xml Security Library Search vendor "Aleksey" for product "Xml Security Library" | 1.2.9 Search vendor "Aleksey" for product "Xml Security Library" and version "1.2.9" | - |
Affected
| ||||||
| Aleksey Search vendor "Aleksey" | Xml Security Library Search vendor "Aleksey" for product "Xml Security Library" | 1.2.10 Search vendor "Aleksey" for product "Xml Security Library" and version "1.2.10" | - |
Affected
| ||||||
| Aleksey Search vendor "Aleksey" | Xml Security Library Search vendor "Aleksey" for product "Xml Security Library" | 1.2.11 Search vendor "Aleksey" for product "Xml Security Library" and version "1.2.11" | - |
Affected
| ||||||
| Aleksey Search vendor "Aleksey" | Xml Security Library Search vendor "Aleksey" for product "Xml Security Library" | 1.2.13 Search vendor "Aleksey" for product "Xml Security Library" and version "1.2.13" | - |
Affected
| ||||||
| Aleksey Search vendor "Aleksey" | Xml Security Library Search vendor "Aleksey" for product "Xml Security Library" | 1.2.14 Search vendor "Aleksey" for product "Xml Security Library" and version "1.2.14" | - |
Affected
| ||||||
| Aleksey Search vendor "Aleksey" | Xml Security Library Search vendor "Aleksey" for product "Xml Security Library" | 1.2.15 Search vendor "Aleksey" for product "Xml Security Library" and version "1.2.15" | - |
Affected
| ||||||
| Apple Search vendor "Apple" | Webkit Search vendor "Apple" for product "Webkit" | * | - |
Affected
| ||||||