Description
An integer overflow during the parsing of XML using the Expat library. This vulnerability affects Firefox < 50.
CVSS breakdown
CVSS 3.1
Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
High
Affected products
- Debian / debian_linux8.0 – 8.0
- Debian / debian_linux9.0 – 9.0
- Debian / debian_linux10.0 – 10.0
- Mozilla / Firefoxunspecified – 50
- Mozilla / Firefox50
- Python / python2.7.0 – 2.7.15
References
- VENDOR_ADVISORYhttps://www.debian.org/security/2017/dsa-3898
- MISChttp://www.securityfocus.com/bid/94337
- MISChttps://bugzilla.mozilla.org/show_bug.cgi?id=1274777
- MISChttp://www.securitytracker.com/id/1037298
- MISChttp://www.securitytracker.com/id/1039427
- VENDOR_ADVISORYhttps://www.mozilla.org/security/advisories/mfsa2016-89/
Updated 21m ago · 8 sources