PT-2016-7632 · Mozilla+5 · Firefox+5

Gustavo Grieco

·

Publicado

2016-11-15

·

Atualizado

2024-12-12

·

CVE-2016-9063

CVSS v3.1

9.8

Crítica

VetorAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Firefox versions prior to 50
Description The issue is related to an integer overflow that occurs during the parsing of XML using the Expat library.
Recommendations For versions prior to 50, update to version 50 or later to resolve the issue.

Exploit

Correção

Integer Overflow

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-190

Identificadores relacionados

ALT-PU-2016-2307
ALT-PU-2017-1578
ALT-PU-2017-2851
ALT-PU-2018-2782
CVE-2016-9063
DSA-3898-1
MGASA-2017-0214
MGASA-2017-0323
OPENSUSE-SU-2016_2861-1
OPENSUSE-SU-2016_3011-1
OPENSUSE-SU-2024:10071-1
OPENSUSE-SU-2024:10748-1
OPENSUSE-SU-2024:14572-1
PSF-2018-1
SUSE-SU-2017:2299-1
SUSE-SU-2017:2375-1
SUSE-SU-2017:2699-1
SUSE-SU-2017:2700-1
SUSE-SU-2019:2872-1
SUSE-SU-2020:0497-1
USN-3124-1

Produtos afetados

Alt Linux
Debian
Expat
Firefox
Suse
Ubuntu