libxslt XSL Style Sheet Array Overflow May Let Remote Users Execute Arbitrary Code
|
|
SecurityTracker Alert ID: 1020071
|
|
SecurityTracker URL: http://securitytracker.com/id?1020071
|
|
CVE Reference: CVE-2008-1767
(Links to External Site)
|
Date: May 21 2008
|
Impact: Denial of service via network, Execution of arbitrary code via network, User access via network
|
Fix Available: Yes
Vendor Confirmed: Yes
|
Version(s): prior to 1.1.24
|
Description: A vulnerability was reported in libxslt. A remote user can cause arbitrary code to be executed on the target user's system.
A remote user can create a specially crafted XSL style sheet file that, when processed by the target application using libxslt, will
trigger an array overflow and execute arbitrary code on the target system. The code will run with the privileges of the target
application.
The vulnerability resides in 'libxslt/pattern.c'.
Anthony de Almeida Lopes reported this vulnerability.
|
Impact: A remote user can create a file that, when processed by the target application, will cause the application to crash or execute arbitrary code.
|
Solution: The vendor has issued a fixed version (1.1.24), available at:
http://xmlsoft.org/XSLT/downloads.html
|
Vendor URL: xmlsoft.org/XSLT/ (Links to External Site)
|
Cause: Boundary error
|
Underlying OS: Linux (Any), UNIX (Any)
|
|
Message History:
This archive entry has one or more follow-up message(s) listed below.
|
Source Message Contents
|
Date: Wed, 21 May 2008 06:13:58 -0400
Subject: libxslt
|
http://bugzilla.gnome.org/show_bug.cgi?id=527297
CVE-2008-1767
|
|
