Brad Hill has reported a vulnerability in IAIK XSECT, which can be exploited by malicious people to compromise a vulnerable system.

The vulnerability is caused due to an error when processing XSLT stylesheets contained in XSLT Transforms in XML signatures. This can be exploited to execute arbitrary code when an application processes a specially crafted XML signature.

Solution
Update to version 1.10.

Provided and/or discovered by
Brad Hill

Original Advisory
http://www.isecpartners.com/advisories/2007-04-dsig.txt

Deep Links
Links available in Customer Area