EXPOSURES › CVE-2016-0718
CVE-2016-0718
CRITICAL
DETAIL
SourceNVD · cve
Published2016-05-26
CVSS9.8
Referencehttps://nvd.nist.gov/vuln/detail/CVE-2016-0718 ↗
▸ RECOMMENDED ACTION Critical severity — schedule patching of the affected products.
PLAYERS IMPLICATED
McAfee · vendorapple · vendorcanonical · vendordebian · vendorlibexpat project · vendormozilla · vendoropensuse · vendorpython · vendorsuse · vendordebian linux · productfirefox · productleap · productlibexpat · productlinux enterprise debuginfo · productlinux enterprise desktop · productlinux enterprise server · productlinux enterprise software development kit · productmac os x · productopensuse · productpolicy auditor · productpython · productstudio onsite · productubuntu linux · product
DESCRIPTION
Expat allows context-dependent attackers to cause a denial of service (crash) or possibly execute arbitrary code via a malformed input document, which triggers a buffer overflow.
SENTIMENT · TRUSTED SOURCES
synthesis
severe-fallout
-0.60
Apple faced severe fallout due to a critical buffer overflow in Expat allowing arbitrary code execution and denial of service, though the vendor's response was not detailed in the provided source.
Critical vulnerability in Expat allowed arbitrary code execution and denial of service, resulting in severe fallout for Apple.
"Expat allows context-dependent attackers to cause a denial of service (crash) or possibly execute arbitrary code via a malformed input document, which triggers a buffer overflow."
AFFECTED FEDRAMP PRODUCTS · 0
No correlated FedRAMP products.