Back to feed
EUVD-2016-0749 · Published May 26, 2016
Expat allows context-dependent attackers to cause a denial of service (crash) or possibly execute arbitrary code via a malformed input document, which triggers a buffer overflow.
Technologies
Suse Linux Enterprise DebuginfoSuse Linux Enterprise DesktopMcafee Policy AuditorOpensuse OpensuseOpensuse LeapLibexpat_Project LibexpatSuse Linux Enterprise Software Development KitSuse Linux Enterprise ServerCanonical Ubuntu LinuxDebian Debian LinuxMozilla FirefoxPython PythonApple Mac Os XSuse Studio Onsite
Weaknesses
CWE-119
CVSS scores
- v3.19.8
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - v2.07.5
AV:N/AC:L/Au:N/C:P/I:P/A:P
MITRE ATT&CK
InferredWhere this vulnerability fits in an attack
Initial Access
References
- http://packetstormsecurity.com/files/141350/ESET-Endpoint-Antivirus-6-Remote-Code-Execution.html
- http://lists.apple.com/archives/security-announce/2016/Jul/msg00000.html
- http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00064.html
- http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00006.html
- http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00007.html
- http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00010.html
Potentially impacted assets
See if this affects your attack surface
