NetSight
IP …
critical9.8

CVE-2016-0718

Expat allows context-dependent attackers to cause a denial of service (crash) or possibly execute arbitrary code via a malformed input document, which triggers…

Impact

Expat allows context-dependent attackers to cause a denial of service (crash) or possibly execute arbitrary code via a malformed input document, which triggers a buffer overflow.

Affected products

VendorProductAffected versions
MozillaFirefox
before 48.0
AppleMac Os X
from 10.11.0 through 10.11.5
SuseLinux Enterprise Debuginfo
Version 11
SuseStudio Onsite
Version 1.3
SuseLinux Enterprise Server
Versions 11, 12
SuseLinux Enterprise Software Development Kit
Versions 11, 12
OpensuseLeap
Version 42.1
SuseLinux Enterprise Desktop
Version 12
CanonicalUbuntu Linux
Versions 12.04, 14.04, 16.04
Libexpat ProjectLibexpat
before 2.2.0
DebianDebian Linux
Version 8.0
OpensuseOpensuse
Versions 13.1, 13.2

Weakness classification

CWE-119

References