NetSight
IP …
medium6.8

CVE-2015-1283

Multiple integer overflows in the XML_GetBuffer function in Expat through 2.1.0, as used in Google Chrome before 44.0.2403.89 and other products, allow remote …

Impact

Multiple integer overflows in the XML_GetBuffer function in Expat through 2.1.0, as used in Google Chrome before 44.0.2403.89 and other products, allow remote attackers to cause a denial of service (heap-based buffer overflow) or possibly have unspecified other impact via crafted XML data, a related issue to CVE-2015-2716.

Affected products

VendorProductAffected versions
GoogleChrome
through 43.0.2357.134
Libexpat ProjectLibexpat
through 2.1.0
PythonPython
from 2.7.0 before 2.7.12
from 3.3.0 before 3.3.7
from 3.4.0 before 3.4.5
from 3.5.0 before 3.5.2
DebianDebian Linux
Versions 7.0, 8.0, 9.0
CanonicalUbuntu Linux
Versions 12.04, 14.04, 15.04
SuseLinux Enterprise Debuginfo
Version 11
SuseStudio Onsite
Version 1.3
OpensuseLeap
Version 42.1
OpensuseOpensuse
Versions 13.1, 13.2
SuseLinux Enterprise Desktop
Version 12
SuseLinux Enterprise Server
Versions 11, 12
SuseLinux Enterprise Software Development Kit
Versions 11, 12

Weakness classification

CWE-190

References