PT-2015-5191 · Google+9 · Google Chrome+9
Publicado
2015-07-21
·
Atualizado
2025-01-13
·
CVE-2015-1283
CVSS v2.0
6.8
Média
| Vetor | AV:N/AC:M/Au:N/C:P/I:P/A:P |
Name of the Vulnerable Software and Affected Versions
Expat versions through 2.1.0
Google Chrome versions prior to 44.0.2403.89
Description
The issue is caused by multiple integer overflows in the XML GetBuffer function in Expat, which can be exploited by remote attackers to cause a denial of service (heap-based buffer overflow) or possibly have other unspecified impacts via crafted XML data.
Recommendations
For Expat versions through 2.1.0, update to a version later than 2.1.0 to resolve the issue.
For Google Chrome versions prior to 44.0.2403.89, update to version 44.0.2403.89 or later to resolve the issue.
Exploit
Correção
DoS
Integer Overflow
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Alt Linux
Debian
Expat
Google Chrome
Linuxmint
Opera
Red Hat
Suse
Ubuntu
Itunes