CVE-2012-2825

Description

The XSL implementation in Google Chrome before 20.0.1132.43 allows remote attackers to cause a denial of service (incorrect read operation) via unspecified vectors.

How to fix CVE-2012-2825

To remediate CVE-2012-2825, upgrade the affected package to a fixed version below.

• Debian/libxslt—upgrade to 1.1.26-13 or later

Is CVE-2012-2825 being exploited?

Low — EPSS is 1.1%, meaning exploitation activity has not been observed at scale.

Affected packages (1)

• from 0, < 1.1.26-13

References (1)

• ADVISORYsecurity-tracker.debian.org/tracker/CVE-2012-2825