CVE-2016-0718

critical · 9.8

Expat allows context-dependent attackers to cause a denial of service (crash) or possibly execute arbitrary code via a malformed input document, which triggers a buffer overflow.

9.8

CVSS

13.3%

EPSS (exploit prob.)

96th

EPSS percentile

2016-05-26

Published

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weaknesses

CWE-119

Affected products

Vendor	Product	Affected versions
mozilla	firefox	< 48.0
apple	mac_os_x	>= 10.11.0, <= 10.11.5
suse	linux_enterprise_debuginfo	11
suse	studio_onsite	1.3
suse	linux_enterprise_server	11
suse	linux_enterprise_software_development_kit	11
opensuse	leap	42.1
suse	linux_enterprise_desktop	12
suse	linux_enterprise_desktop	12
suse	linux_enterprise_server	12
suse	linux_enterprise_server	12
suse	linux_enterprise_software_development_kit	12
suse	linux_enterprise_software_development_kit	12
canonical	ubuntu_linux	12.04
canonical	ubuntu_linux	14.04
canonical	ubuntu_linux	16.04
libexpat_project	libexpat	< 2.2.0
debian	debian_linux	8.0
opensuse	opensuse	13.1
opensuse	opensuse	13.2
mcafee	policy_auditor	< 6.5.1
python	python	>= 2.7.0, < 2.7.15
python	python	>= 3.3.0, < 3.3.7
python	python	>= 3.4.0, < 3.4.7
python	python	>= 3.5.0, < 3.5.4
python	python	>= 3.6.0, < 3.6.2

Check a specific version with /api/v1/cve/match.

References

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2016-0718