CVE-2016-0718: Buffer Overflow
An out-of-bounds read flaw was found in the way Expat processed certain input. A remote attacker could send specially crafted XML that, when parsed by an application using the Expat library, would cause that application to crash or, possibly, execute arbitrary code with the permission of the user running the application.
Other sources
Expat allows context-dependent attackers to cause a denial of service (crash) or possibly execute arbitrary code via a malformed input document, which triggers a buffer overflow.
The Expat XML parser mishandles certain kinds of malformed input documents, resulting in buffer overflows during processing and error reporting. The overflows can manifest as a segmentation fault or as memory corruption during a parse operation. The bugs allow for a denial of service attack in many applications by an unauthenticated attacker, and could conceivably result in remote code execution.
— Red Hat
Affected Software
Remediation
Event History
Parent advisories
This vulnerability appears in the following advisories.
Frequently Asked Questions
What is the severity of CVE-2016-0718?
CVE-2016-0718 has been assigned a moderate severity level due to the potential for a remote attacker to exploit the vulnerability.
How do I fix CVE-2016-0718?
To resolve CVE-2016-0718, upgrade to the patched versions of Expat as specified in vendor advisories, such as Red Hat or Debian.
What systems are affected by CVE-2016-0718?
CVE-2016-0718 affects multiple applications and platforms that utilize the Expat XML parsing library, notably including specific versions of Firefox and several Linux distributions.
What are the potential impacts of CVE-2016-0718?
Exploitation of CVE-2016-0718 may lead to application crashes or arbitrary code execution with the permissions of the user running the application.
Is there a workaround for CVE-2016-0718?
There are no known workarounds for CVE-2016-0718; updating to a secure version is the recommended approach.