CVE-2008-1767
HIGH 7.5EPSS 12.8%
Buffer overflow in pattern.c in libxslt before 1.1.24 allows context-dependent attackers to cause a denial of service (crash) and possibly execute arbitrary code via an XSL style sheet file with a long XSLT "transformation match" condition that triggers a large number of steps.
- CVSS v2.0
- 7.5 HIGH
AV:N/AC:L/Au:N/C:P/I:P/A:P - EPSS
- 12.79% chance of exploitation in the next 30 days, 96th percentile
- Published
- 2008-05-23
- Updated
- 2024-08-07