pentester.land· Feb 25, 2013· by Nicolas Grégoire (@Agarri_FR)

Mutation-based fuzzing of XSLT engines

Target Program: Intel, Mozilla (Firefox), Adobe (Reader), libxslt, Microsoft (MSXML), Google (Chrome & Chromium)

🎯 Vulnerability: Web Security Vulnerability

💡 Defense Fix: Implement strict input validation, contextual output encoding, and enforce least-privilege authorization controls.

#Memory corruption#Fuzzing#Heap buffer overflow#Use-After-Free#NULL pointer dereference#Out-of-bounds Read