NetSight
IP …
high7.5Public exploit code

CVE-2008-1767

Buffer overflow in pattern.c in libxslt before 1.1.24 allows context-dependent attackers to cause a denial of service (crash) and possibly execute arbitrary co…

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

Buffer overflow in pattern.c in libxslt before 1.1.24 allows context-dependent attackers to cause a denial of service (crash) and possibly execute arbitrary code via an XSL style sheet file with a long XSLT "transformation match" condition that triggers a large number of steps.

Affected products

VendorProductAffected versions
RedhatDesktop
Version 3
RedhatEnterprise Linux
Versions 2.1, 3.0, 4.0, 5.0
RedhatEnterprise Linux Desktop
Versions 4, 5
RedhatEnterprise Linux Desktop Workstation
Version 5
RedhatLinux Advanced Workstation
Version 2.1

Weakness classification

CWE-119

References