CVE-2008-1767: Buffer Overflow

Published May 23, 2008

Updated

Buffer overflow in pattern.c in libxslt before 1.1.24 allows context-dependent attackers to cause a denial of service (crash) and possibly execute arbitrary code via an XSL style sheet file with a long XSLT "transformation match" condition that triggers a large number of steps.

Affected Software

15 affected components

redhat Desktop=3

redhat Enterprise Linux=2.1

redhat Enterprise Linux=3.0

redhat Enterprise Linux=4.0

redhat Enterprise Linux=5.0

redhat Enterprise Linux Desktop=4

redhat Enterprise Linux Desktop=5

redhat Enterprise Linux Desktop Workstation=5

redhat Linux Advanced Workstation=2.1

Event History

May 23, 2008

CVE Published

via MITRE·02:00 PM

Data Sourced

via MITRE·02:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2008-1767?

CVE-2008-1767 has a severity rating that could lead to a denial of service and potential arbitrary code execution.

How do I fix CVE-2008-1767?

The best way to fix CVE-2008-1767 is to upgrade libxslt to version 1.1.24 or later.

What are the affected systems for CVE-2008-1767?

CVE-2008-1767 affects various versions of Red Hat Desktop and Red Hat Enterprise Linux from 2.1 to 5.0.

What type of vulnerability is CVE-2008-1767?

CVE-2008-1767 is a buffer overflow vulnerability in the libxslt library.

Can CVE-2008-1767 be exploited remotely?

Yes, CVE-2008-1767 can potentially be exploited remotely through specially crafted XSLT transformation match conditions.