« List of all CVEs

CVE-2015-1283

Published: 7/23/2015 Last updated: 8/6/2024 Reserved: 1/21/2015

Multiple integer overflows in the XML_GetBuffer function in Expat through 2.1.0, as used in Google Chrome before 44.0.2403.89 and other products, allow remote attackers to cause a denial of service (heap-based buffer overflow) or possibly have unspecified other impact via crafted XML data, a related issue to CVE-2015-2716.

CNA assigner: Chrome (ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28) Requested by: n/a

Opam packages affected (11)

conf-expat conf-gtk2 conf-gtk3 conf-python-2-7 conf-python-2-7-dev conf-python-3 conf-python-3-7 conf-python-3-dev ocaml-expat py termbox

Products affected (1)

Product Vendor Version
n/a n/a n/a

References (40)