CVE-2016-9063 log
| Source |
|
| Severity | Medium |
| Remote | Yes |
| Type | Denial of service |
| Description | An integer overflow vulnerability has been discovered during the parsing of XML using the Expat library. |
| Group | Package | Affected | Fixed | Severity | Status | Ticket |
|---|---|---|---|---|---|---|
| AVG-306 | expat | 2.2.0-1 | 2.2.1-1 | Medium | Fixed | |
| AVG-305 | lib32-expat | 2.2.0-1 | 2.2.2-1 | Medium | Fixed | |
| AVG-72 | firefox | 49.0.2-1 | 50.0-1 | Critical | Fixed |
| Date | Advisory | Group | Package | Severity | Type |
|---|---|---|---|---|---|
| 26 Jul 2017 | ASA-201707-27 | AVG-305 | lib32-expat | Medium | denial of service |
| 26 Jun 2017 | ASA-201706-32 | AVG-306 | expat | Medium | denial of service |
| 16 Nov 2016 | ASA-201611-16 | AVG-72 | firefox | Critical | multiple issues |
| References |
|---|
https://www.mozilla.org/en-US/security/advisories/mfsa2016-89/#CVE-2016-9063 https://github.com/libexpat/libexpat/commit/d4f735b88d9932bd5039df2335eefdd0723dbe20 |