8 matches found
Siemens SIMATIC S7-1500 Integer Overflow or Wraparound (CVE-2022-23852)
Expat aka libexpat before 2.4.4 has a signed integer overflow in XMLGetBuffer, for configurations with a nonzero XMLCONTEXTBYTES. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc...
AZL-7835 CVE-2022-23852 affecting package expat for versions less than 2.4.8-1
Expat aka libexpat before 2.4.4 has a signed integer overflow in XMLGetBuffer, for configurations with a nonzero XMLCONTEXTBYTES...
ALPINE-CVE-2022-23852
Expat aka libexpat before 2.4.4 has a signed integer overflow in XMLGetBuffer, for configurations with a nonzero XMLCONTEXTBYTES...
UBUNTU-CVE-2022-23852
Expat aka libexpat before 2.4.4 has a signed integer overflow in XMLGetBuffer, for configurations with a nonzero XMLCONTEXTBYTES...
libexpat 输入验证错误漏洞
libexpat is a streaming XML parser written in the C language. An input validation error vulnerability exists in Libexpat that stems from the product's XMLGetBuffer not effectively limiting the range of signed integers. An attacker could cause a buffer overflow by configuring a special XML byte. T...
chromium-browser: Heap-buffer-overflow in expat.
Multiple integer overflows in the XMLGetBuffer function in Expat through 2.1.0, as used in Google Chrome before 44.0.2403.89 and other products, allow remote attackers to cause a denial of service heap-based buffer overflow or possibly have unspecified other impact via crafted XML data, a related...
DLA-281-1 expat - security update
Bulletin has no description...
expat: Integer overflow leading to buffer overflow in XML_GetBuffer()
Buffer overflow in the XML parser in Mozilla Firefox before 38.0, Firefox ESR 31.x before 31.7, and Thunderbird before 31.7 allows remote attackers to execute arbitrary code by providing a large amount of compressed XML data, a related issue to CVE-2015-1283...