{ "schema_version": "1.4.0", "id": "GHSA-h927-jfxh-4j78", "modified": "2022-05-01T23:43:19Z", "published": "2022-05-01T23:43:19Z", "aliases": [ "CVE-2008-1767" ], "details": "Buffer overflow in pattern.c in libxslt before 1.1.24 allows context-dependent attackers to cause a denial of service (crash) and possibly execute arbitrary code via an XSL style sheet file with a long XSLT \"transformation match\" condition that triggers a large number of steps.", "severity": [], "affected": [], "references": [ { "type": "ADVISORY", "url": "https://nvd.nist.gov/vuln/detail/CVE-2008-1767" }, { "type": "WEB", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/42560" }, { "type": "WEB", "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9785" }, { "type": "WEB", "url": "http://bugzilla.gnome.org/show_bug.cgi?id=527297" }, { "type": "WEB", "url": "http://lists.apple.com/archives/security-announce//2008/Nov/msg00001.html" }, { "type": "WEB", "url": "http://lists.apple.com/archives/security-announce/2008//Jul/msg00001.html" }, { "type": "WEB", "url": "http://lists.apple.com/archives/security-announce/2008/Oct/msg00001.html" }, { "type": "WEB", "url": "http://secunia.com/advisories/30315" }, { "type": "WEB", "url": "http://secunia.com/advisories/30323" }, { "type": "WEB", "url": "http://secunia.com/advisories/30393" }, { "type": "WEB", "url": "http://secunia.com/advisories/30521" }, { "type": "WEB", "url": "http://secunia.com/advisories/30717" }, { "type": "WEB", "url": "http://secunia.com/advisories/31074" }, { "type": "WEB", "url": "http://secunia.com/advisories/31363" }, { "type": "WEB", "url": "http://secunia.com/advisories/32222" }, { "type": "WEB", "url": "http://secunia.com/advisories/32706" }, { "type": "WEB", "url": "http://security.gentoo.org/glsa/glsa-200806-02.xml" }, { "type": "WEB", "url": "http://support.apple.com/kb/HT3216" }, { "type": "WEB", "url": "http://support.apple.com/kb/HT3298" }, { "type": "WEB", "url": "http://www.debian.org/security/2008/dsa-1589" }, { "type": "WEB", "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2008:151" }, { "type": "WEB", "url": "http://www.novell.com/linux/security/advisories/2008_13_sr.html" }, { "type": "WEB", "url": "http://www.redhat.com/support/errata/RHSA-2008-0287.html" }, { "type": "WEB", "url": "http://www.securityfocus.com/bid/29312" }, { "type": "WEB", "url": "http://www.securityfocus.com/bid/31681" }, { "type": "WEB", "url": "http://www.securitytracker.com/id?1020071" }, { "type": "WEB", "url": "http://www.ubuntu.com/usn/usn-633-1" }, { "type": "WEB", "url": "http://www.vupen.com/english/advisories/2008/1580/references" }, { "type": "WEB", "url": "http://www.vupen.com/english/advisories/2008/2094/references" }, { "type": "WEB", "url": "http://www.vupen.com/english/advisories/2008/2780" } ], "database_specific": { "cwe_ids": [ "CWE-119" ], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2008-05-23T15:32:00Z" } }