CVE-2015-2716: Buffer Overflow
Buffer overflow in the XML parser in Mozilla Firefox before 38.0, Firefox ESR 31.x before 31.7, and Thunderbird before 31.7 allows remote attackers to execute arbitrary code by providing a large amount of compressed XML data, a related issue to CVE-2015-1283.
Other sources
Expat, as used in Mozilla Firefox and Thunderbird, is vulnerable to a buffer overflow, caused by improper bounds checking by the XML parser. By persuading a victim to open a specially crafted XML file, a remote attacker could overflow a buffer and execute arbitrary code on the system or cause the application to crash.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2015-2716?
CVE-2015-2716 is considered to be a critical vulnerability due to its potential for remote code execution.
How do I fix CVE-2015-2716?
The recommended solution for CVE-2015-2716 is to update affected Mozilla Firefox, Thunderbird, or related software to their latest supported versions.
Which versions are affected by CVE-2015-2716?
CVE-2015-2716 affects Mozilla Firefox versions before 38.0, Firefox ESR 31.x before 31.7, and Thunderbird before 31.7.
What type of attack does CVE-2015-2716 involve?
CVE-2015-2716 involves a buffer overflow attack that allows remote attackers to execute arbitrary code.
Is there a specific fix for IBM Data Risk Manager related to CVE-2015-2716?
Yes, IBM Data Risk Manager versions up to 2.0.6 may require a patch to mitigate the risks associated with CVE-2015-2716.