CVE ID:	CVE-2012-6139
Description:	libxslt before 1.1.28 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via an (1) empty match attribute in a XSL key to the xsltAddKey function in keys.c or (2) uninitialized variable to the xsltDocumentFunction function in functions.c.
Test IDs:	1.3.6.1.4.1.25623.1.1.4.2013.1656.1   1.3.6.1.4.1.25623.1.1.4.2013.1654.1   1.3.6.1.4.1.25623.1.0.841383   1.3.6.1.4.1.25623.1.0.865568   1.3.6.1.4.1.25623.1.0.702654   1.3.6.1.4.1.25623.1.1.4.2013.0727.1
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2012-6139 Debian Security Information: DSA-2654 (Google Search) http://www.debian.org/security/2013/dsa-2654 http://lists.fedoraproject.org/pipermail/package-announce/2013-April/102065.html http://www.mandriva.com/security/advisories?name=MDVSA-2013:141 http://www.securitytracker.com/id/1028338 http://secunia.com/advisories/52745 http://secunia.com/advisories/52805 http://secunia.com/advisories/52813 http://secunia.com/advisories/52884 SuSE Security Announcement: SUSE-SU-2013:1654 (Google Search) https://www.suse.com/support/update/announcement/2013/suse-su-20131654-1.html SuSE Security Announcement: SUSE-SU-2013:1656 (Google Search) https://www.suse.com/support/update/announcement/2013/suse-su-20131656-1.html SuSE Security Announcement: openSUSE-SU-2013:0585 (Google Search) http://lists.opensuse.org/opensuse-updates/2013-04/msg00020.html SuSE Security Announcement: openSUSE-SU-2013:0593 (Google Search) http://lists.opensuse.org/opensuse-updates/2013-04/msg00028.html http://www.ubuntu.com/usn/USN-1784-1