Direct naar de inhoud
⚡ Kritieke cyberalerts voor jouw sector & systemen — direct in je inbox. Aanmelden →
CVE's Videos Dagbriefing

← Terug naar CVE-database

CVE-2016-1683

HIGH · 7.5 CVSS Gepubliceerd: CWE-119

Beschrijving

numbers.c in libxslt before 1.1.29, as used in Google Chrome before 51.0.2704.63, mishandles namespace nodes, which allows remote attackers to cause a denial of service (out-of-bounds heap memory access) or possibly have unspecified other impact via a crafted document.

Vendors

Xmlsoft Canonical Debian Opensuse Redhat Suse Google

Affected products

Libxslt Ubuntu Linux Debian Linux Leap Opensuse Enterprise Linux Desktop Enterprise Linux Server Enterprise Linux Workstation Linux Enterprise Chrome

References