CVE-2008-1767 Buffer overflow in pattern.c in libxslt before 1.1.24 allows context-dependent attackers to cause a denial of service (crash) and possibly execute arbitrary code via an XSL style sheet file with a lon...
HighCVSS 7.5
EPSS 12.8%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Buffer overflow in pattern.c in libxslt before 1.1.24 allows context-dependent attackers to cause a denial of service (crash) and possibly execute arbitrary code via an XSL style sheet file with a long XSLT "transformation match" condition that triggers a large number of steps.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| redhat desktop | = 3 | No fix listed |
| redhat enterprise linux | = 2.1 | No fix listed |
| redhat enterprise linux | = 3.0 | No fix listed |
| redhat enterprise linux | = 4.0 | No fix listed |
| redhat enterprise linux | = 5.0 | No fix listed |
| redhat enterprise linux desktop | = 4 | No fix listed |
| redhat enterprise linux desktop | = 5 | No fix listed |
| redhat enterprise linux desktop workstation | = 5 | No fix listed |
| redhat linux advanced workstation | = 2.1 | No fix listed |
| debian/libxslt(Debian:12) | < 1.1.24-1 | 1.1.24-1 |
| debian/libxslt(Debian:13) | < 1.1.24-1 | 1.1.24-1 |
| debian/libxslt(Debian:14) | < 1.1.24-1 | 1.1.24-1 |
References
- Debian Security Tracker CVE-2008-1767 vendor-advisory
- bugs.debian.org issue-tracking
- bugzilla.gnome.org exploit
- APPLE-SA-2008-11-13 vendor-advisory
- APPLE-SA-2008-07-11 vendor-advisory
- APPLE-SA-2008-10-09 vendor-advisory
- 30315 third-party-advisory vendor-advisory
- 30323 third-party-advisory vendor-advisory
- 30393 third-party-advisory
- 30521 third-party-advisory
- 30717 third-party-advisory
- 31074 third-party-advisory
- 31363 third-party-advisory
- 32222 third-party-advisory
- 32706 third-party-advisory
- GLSA-200806-02 vendor-advisory
- support.apple.com
- support.apple.com
- DSA-1589 vendor-advisory
- MDVSA-2008:151 vendor-advisory
- SUSE-SR:2008:013 vendor-advisory
- RHSA-2008:0287 vendor-advisory
- 29312 exploit vdb-entry
- 31681 vdb-entry
- 1020071 vdb-entry
- USN-633-1 vendor-advisory
- ADV-2008-1580 vdb-entry
- ADV-2008-2094 vdb-entry
- ADV-2008-2780 vdb-entry
- libxslt-xsl-bo(42560) vdb-entry
- oval:org.mitre.oval:def:9785 signature vdb-entry