CVE Catalog
CVE-2016-0718
CriticalSummary
Expat allows context-dependent attackers to cause a denial of service (crash) or possibly execute arbitrary code via a malformed input document, which triggers a buffer overflow.
Risk Assessment
The organization may experience system crashes or unauthorized access to data, leading to serious security implications.
Recommendation
It is recommended to update the Expat library to the latest version and implement input document validation to prevent buffer overflow.
Original NVD description (English source)
Expat allows context-dependent attackers to cause a denial of service (crash) or possibly execute arbitrary code via a malformed input document, which triggers a buffer overflow.