CVE:CVE-2016-4472
CNNVD:CNNVD-201606-147
Expat是一款使用C语言编写的快速流式XML解析器。
Expat中存在缓冲区错误漏洞，该漏洞源于使用优化设计的编译器会删除溢出保护。远程攻击者利用该漏洞通过特制的XML数据造成拒绝服务（崩溃）或执行任意代码。
solution:Upgrade libexpat_project libexpat to a higher version than 2.1.1,and avoid the version (,2.1.1]; Upgrade canonical ubuntu_linux to a higher version than 12.04,and avoid the version 12.04; Upgrade mcafee policy_auditor to a higher version than 6.5.1,and avoid the version (,6.5.1); Upgrade python python to a higher version than 2.7.15,3.3.7,3.4.7,3.5.4,3.6.2,and avoid the version [2.7.0,2.7.15),[3.3.0,3.3.7),[3.4.0,3.4.7),[3.5.0,3.5.4),[3.6.0,3.6.2)