CVE Reference: CVE-2008-1767

NOTE: The text on this page is written by CVE MITRE and reflects neither the opinions of Secunia or the results of our research. All data on this page is written and maintained by CVE MITRE.

Original Page at CVE MITRE:
CVE-2008-1767

Description:
Buffer overflow in pattern.c in libxslt before 1.1.24 allows context-dependent attackers to cause a denial of service (crash) and possibly execute arbitrary code via an XSL style sheet file with a long XSLT "transformation match" condition that triggers a large number of steps.

CVE Status:
Candidate

References:

XF
  http://xforce.iss.net/xforce/xfdb/42560

UBUNTU
  http://www.ubuntu.com/usn/usn-633-1

SUSE
  http://www.novell.com/linux/security/advisories/2008_13_sr.html

ST
  1020071

SAID
  Secunia Advisory: SA31074
  Secunia Advisory: SA30717
  Secunia Advisory: SA30521
  Secunia Advisory: SA30393
  Secunia Advisory: SA30323
  Secunia Advisory: SA30315
  Secunia Advisory: SA32706
  Secunia Advisory: SA31363
  Secunia Advisory: SA32222

REDHAT
  http://www.redhat.com/support/errata/RHSA-2008-0287.html

OVAL
  http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:9785

MANDRIVA
  http://www.mandriva.com/security/advisories?name=MDVSA-2008:151

GENTOO
  http://security.gentoo.org/glsa/glsa-200806-02.xml

DEBIAN
  http://www.debian.org/security/2008/dsa-1589

CONFIRM
  http://support.apple.com/kb/HT3298
  http://support.apple.com/kb/HT3216
  http://bugzilla.gnome.org/show_bug.cgi?id=527297

BID
  31681
  29312

APPLE
  http://lists.apple.com/archives/security-announce//2008/Nov/msg00001.html
  http://lists.apple.com/archives/security-announce/2008/Oct/msg00001.html
  http://lists.apple.com/archives/security-announce/2008//Jul/msg00001.html


Return to the previous page.