CVEs-PoC/2008/CVE-2008-1767.md

CVE-2008-1767

Description

Buffer overflow in pattern.c in libxslt before 1.1.24 allows context-dependent attackers to cause a denial of service (crash) and possibly execute arbitrary code via an XSL style sheet file with a long XSLT "transformation match" condition that triggers a large number of steps.

POC

Reference

• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9785

Github

• https://github.com/mudongliang/LinuxFlaw
• https://github.com/oneoy/cve-