CVE-2008-1767

Published: May 23, 2008Modified: Apr 23, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

Buffer overflow in pattern.c in libxslt before 1.1.24 allows context-dependent attackers to cause a denial of service (crash) and possibly execute arbitrary code via an XSL style sheet file with a long XSLT "transformation match" condition that triggers a large number of steps.

Affected (15)

Products: Redhat: Desktop, Enterprise Linux, Enterprise Linux Desktop, Enterprise Linux Desktop Workstation, Linux Advanced Workstation

5 products

Enterprise Linux

Enterprise Linux Desktop

Enterprise Linux Desktop Workstation

Linux Advanced Workstation

Configuration A

15 vulnerable

Vulnerable Software	Affected Versions
Redhat Desktop	Version 3
Redhat Enterprise Linux	Version 2.1
Redhat Enterprise Linux	Version 2.1
Redhat Enterprise Linux	Version 2.1
Redhat Enterprise Linux	Version 3.0
Redhat Enterprise Linux	Version 3.0
Redhat Enterprise Linux	Version 3.0
Redhat Enterprise Linux	Version 4.0
Redhat Enterprise Linux	Version 4.0
Redhat Enterprise Linux	Version 4.0
Redhat Enterprise Linux	Version 5.0
Redhat Enterprise Linux Desktop	Version 4
Redhat Enterprise Linux Desktop	Version 5
Redhat Enterprise Linux Desktop Workstation	Version 5
Redhat Linux Advanced Workstation	Version 2.1

Related CWEs

Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

References (58)

http://bugzilla.gnome.org/show_bug.cgi?id=527297

Source: cve@mitre.org

Exploit

http://lists.apple.com/archives/security-announce//2008/Nov/msg00001.html

Source: cve@mitre.org

http://lists.apple.com/archives/security-announce/2008//Jul/msg00001.html

Source: cve@mitre.org

http://lists.apple.com/archives/security-announce/2008/Oct/msg00001.html

Source: cve@mitre.org

http://secunia.com/advisories/30315

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/30323

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/30393

Source: cve@mitre.org

http://secunia.com/advisories/30521

Source: cve@mitre.org

http://secunia.com/advisories/30717

Source: cve@mitre.org

http://secunia.com/advisories/31074

Source: cve@mitre.org

http://secunia.com/advisories/31363

Source: cve@mitre.org

http://secunia.com/advisories/32222

Source: cve@mitre.org

http://secunia.com/advisories/32706

Source: cve@mitre.org

http://security.gentoo.org/glsa/glsa-200806-02.xml

Source: cve@mitre.org

http://support.apple.com/kb/HT3216

Source: cve@mitre.org

http://support.apple.com/kb/HT3298

Source: cve@mitre.org

http://www.debian.org/security/2008/dsa-1589

Source: cve@mitre.org

http://www.mandriva.com/security/advisories?name=MDVSA-2008:151

Source: cve@mitre.org

http://www.novell.com/linux/security/advisories/2008_13_sr.html

Source: cve@mitre.org

http://www.redhat.com/support/errata/RHSA-2008-0287.html

Source: cve@mitre.org

http://www.securityfocus.com/bid/29312

Source: cve@mitre.org

Exploit

http://www.securityfocus.com/bid/31681

Source: cve@mitre.org

http://www.securitytracker.com/id?1020071

Source: cve@mitre.org

http://www.ubuntu.com/usn/usn-633-1

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2008/1580/references

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2008/2094/references

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2008/2780

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/42560

Source: cve@mitre.org

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9785

Source: cve@mitre.org

http://bugzilla.gnome.org/show_bug.cgi?id=527297

Source: af854a3a-2127-422b-91ae-364da2661108

Exploit

http://lists.apple.com/archives/security-announce//2008/Nov/msg00001.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.apple.com/archives/security-announce/2008//Jul/msg00001.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.apple.com/archives/security-announce/2008/Oct/msg00001.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/30315

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://secunia.com/advisories/30323

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://secunia.com/advisories/30393

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/30521

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/30717

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/31074

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/31363

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/32222

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/32706

Source: af854a3a-2127-422b-91ae-364da2661108

http://security.gentoo.org/glsa/glsa-200806-02.xml

Source: af854a3a-2127-422b-91ae-364da2661108

http://support.apple.com/kb/HT3216

Source: af854a3a-2127-422b-91ae-364da2661108

http://support.apple.com/kb/HT3298

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.debian.org/security/2008/dsa-1589

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.mandriva.com/security/advisories?name=MDVSA-2008:151

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.novell.com/linux/security/advisories/2008_13_sr.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.redhat.com/support/errata/RHSA-2008-0287.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/29312

Source: af854a3a-2127-422b-91ae-364da2661108

Exploit

http://www.securityfocus.com/bid/31681

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securitytracker.com/id?1020071

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.ubuntu.com/usn/usn-633-1

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.vupen.com/english/advisories/2008/1580/references

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.vupen.com/english/advisories/2008/2094/references

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.vupen.com/english/advisories/2008/2780

Source: af854a3a-2127-422b-91ae-364da2661108

https://exchange.xforce.ibmcloud.com/vulnerabilities/42560

Source: af854a3a-2127-422b-91ae-364da2661108

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9785

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.