by Kastro
Paper/Archive/CVE-2016-0718

CVE-2016-0718

redhat — Expat allows context-dependent attackers to cause a denial of service (crash) or possibly execute arbitrary code via a malformed input do…

EPSS 13%CVSS 9.8
critical.is priorityof 100
49
CVSS 9.8 (NVD)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 96.4.964 × 2019.3No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

Expat allows context-dependent attackers to cause a denial of service (crash) or possibly execute arbitrary code via a malformed input document, which triggers a buffer overflow.

Affected

ProductAffectedFixed inSource
n/an/a–CNA

Scores by source

NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CISA ADPSSVCExploitation: none · Automatable: yes · Technical impact: total

References

advisoryrhn.redhat.com/errata/RHSA-2016-2824.htmlreftenable.com/security/tns-2016-20refsecuritytracker.com/id/1037705refsecuritytracker.com/id/1036415reforacle.com/technetwork/security-advisory/cpujul2018-4258247.htmladvisoryubuntu.com/usn/USN-2983-1advisorylists.opensuse.org/opensuse-security-announce/2016-06/msg00010.htmlrefsupport.eset.com/ca6333refsecurityfocus.com/bid/90729advisoryubuntu.com/usn/USN-3044-1refopenwall.com/lists/oss-security/2016/05/17/12reforacle.com/technetwork/topics/security/bulletinjul2016-3090568.htmladvisorylists.apple.com/archives/security-announce/2016/Jul/msg00000.htmladvisorylists.opensuse.org/opensuse-security-announce/2016-06/msg00006.htmlrefbugzilla.mozilla.org/show_bug.cgi?id=1236923refseclists.org/fulldisclosure/2017/Feb/68advisorysecurity.gentoo.org/glsa/201701-21refsource.android.com/security/bulletin/2016-11-01.htmladvisorydebian.org/security/2016/dsa-3582advisorylists.opensuse.org/opensuse-security-announce/2016-06/msg00007.htmlrefbugzilla.redhat.com/show_bug.cgi?id=1296102refmozilla.org/security/announce/2016/mfsa2016-68.htmladvisorylists.opensuse.org/opensuse-security-announce/2016-08/msg00004.htmladvisoryaccess.redhat.com/errata/RHSA-2018:2486refsecuritytracker.com/id/1036348refsupport.apple.com/HT206903advisorylists.opensuse.org/opensuse-security-announce/2016-05/msg00064.htmladvisorylists.opensuse.org/opensuse-security-announce/2016-08/msg00029.htmlrefpacketstormsecurity.com/files/141350/ESET-Endpoint-Antivirus-6-Remote-Code-Execution.htmlrefkc.mcafee.com/corporate/index?page=content&id=SB10365