CVE-2016-4472: The overflow protection in Expat is removed by compilers with certain optimization settings, which allows remote attackers to cause a denial of service (crash) or possibly execute…

Description

The overflow protection in Expat is removed by compilers with certain optimization settings, which allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via crafted XML data. NOTE: this vulnerability exists because of an incomplete fix for CVE-2015-1283 and CVE-2015-2716.

CVSS vector

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Attack vector

Network

Complexity

High

Privileges

None

User interaction

None

Confidentiality

High

Integrity

High

Availability

High

Scope

Unchanged

Exploitation

Is it being used?

Exploit prediction (EPSS)11.9% · higher than 96% of CVEs

Exploited in the wildNo evidence yet

CISA KEVNot listed

Ransomware campaign useNot known

Affected products

Which versions

LI

Libexpat · Libexpat Project

through 2.1.1 · source: NVD

PA

Policy Auditor · Mcafee

before 6.5.1 · source: NVD

PY

Python · Python

2.7.0 before 2.7.15; 3.3.0 before 3.3.7; 3.4.0 before 3.4.7; 3.5.0 before 3.5.4; 3.6.0 before 3.6.2 · source: NVD

UL

Ubuntu Linux · Canonical

12.04 · source: NVD