CVE:CVE-2016-0718
CNNVD:CNNVD-201605-455
Expat是一款使用C语言编写的快速流式XML解析器。
Expat存在缓冲区错误漏洞。攻击者利用该漏洞造成拒绝服务（崩溃），或执行任意代码。
solution:Upgrade mozilla firefox to a higher version than 48.0,and avoid the version (,48.0); Upgrade apple mac_os_x to a higher version than 10.11.5,and avoid the version [10.11.0,10.11.5]; Upgrade suse linux_enterprise_debuginfo to a higher version than 11:sp4,and avoid the version 11:sp4; Upgrade suse studio_onsite to a higher version than 1.3,and avoid the version 1.3; Upgrade suse linux_enterprise_server to a higher version than 11:sp4,12,12:sp1,and avoid the version 11:sp4,12,12:sp1; Upgrade suse linux_enterprise_software_development_kit to a higher version than 11:sp4,12,12:sp1,and avoid the version 11:sp4,12,12:sp1; Upgrade opensuse leap to a higher version than 42.1,and avoid the version 42.1; Upgrade suse linux_enterprise_desktop to a higher version than 12,12:sp1,and avoid the version 12,12:sp1; Upgrade canonical ubuntu_linux to a higher version than 12.04,14.04,16.04,and avoid the version 12.04,14.04,16.04; Upgrade libexpat_project libexpat to a higher version than 2.2.0,and avoid the version (,2.2.0); Upgrade debian debian_linux to a higher version than 8.0,and avoid the version 8.0; Upgrade opensuse opensuse to a higher version than 13.1,13.2,and avoid the version 13.1,13.2; Upgrade mcafee policy_auditor to a higher version than 6.5.1,and avoid the version (,6.5.1); Upgrade python python to a higher version than 2.7.15,3.3.7,3.4.7,3.5.4,3.6.2,and avoid the version [2.7.0,2.7.15),[3.3.0,3.3.7),[3.4.0,3.4.7),[3.5.0,3.5.4),[3.6.0,3.6.2)