CVE-2016-0718

Expat allows context-dependent attackers to cause a denial of service (crash) or possibly execute arbitrary code via a malformed input document, which triggers a buffer overflow.

Affected products

Alt Linux, Centos, Debian, Expat, Linuxmint, Nessus, Red Hat, Suse

Mozilla Firefox

< 48.0

CVSS 3.1

9.8 CRITICAL

EPSS

13.3% (96th percentile)

Weakness

CWE-119

NVD status

Modified

Published

2016-05-26