Описание
An integer overflow during the parsing of XML using the Expat library. This vulnerability affects Firefox < 50.
Пакеты
| Пакет | Статус | Версия исправления | Релиз | Тип |
|---|---|---|---|---|
| firefox | fixed | 50.0-1 | package | |
| firefox-esr | not-affected | package | ||
| expat | fixed | 2.2.0-2 | package | |
| libxmltok | removed | package | ||
| libxmltok | ignored | bookworm | package | |
| expat | fixed | 2.1.0-6+deb8u4 | jessie | package |
| expat | no-dsa | wheezy | package |
Примечания
Expat upstream fix: https://github.com/libexpat/libexpat/commit/d4f735b88d9932bd5039df2335eefdd0723dbe20
EPSS
Процентиль: 84%
0.02307
Низкий
Связанные уязвимости
CVSS3: 9.8
ubuntu
около 7 лет назад
An integer overflow during the parsing of XML using the Expat library. This vulnerability affects Firefox < 50.
CVSS3: 9.8
redhat
больше 8 лет назад
An integer overflow during the parsing of XML using the Expat library. This vulnerability affects Firefox < 50.
CVSS3: 9.8
nvd
около 7 лет назад
An integer overflow during the parsing of XML using the Expat library. This vulnerability affects Firefox < 50.
CVSS3: 9.8
github
около 3 лет назад
An integer overflow during the parsing of XML using the Expat library. This vulnerability affects Firefox < 50.
EPSS
Процентиль: 84%
0.02307
Низкий