CVE:CVE-2015-1283
CNNVD:CNNVD-201507-724
Google Chrome是美国谷歌（Google）公司开发的一款Web浏览器。Expat是美国软件开发者吉姆-克拉克所研发的一个基于C语言的XML解析器库，它采用了一个面向流的解析器。
Google Chrome 44.0.2403.89之前版本中使用的Expat 2.1.0及之前版本中的‘XML_GetBuffer’函数存在整数溢出漏洞。远程攻击者可借助特制的XML数据利用该漏洞造成拒绝服务（基于堆的缓冲区溢出）。
solution:Upgrade google chrome to a higher version than 43.0.2357.134,and avoid the version (,43.0.2357.134]; Upgrade libexpat_project libexpat to a higher version than 2.1.0,and avoid the version (,2.1.0]; Upgrade python python to a higher version than 2.7.12,3.3.7,3.4.5,3.5.2,and avoid the version [2.7.0,2.7.12),[3.3.0,3.3.7),[3.4.0,3.4.5),[3.5.0,3.5.2); Upgrade debian debian_linux to a higher version than 7.0,8.0,9.0,and avoid the version 7.0,8.0,9.0; Upgrade canonical ubuntu_linux to a higher version than 12.04,14.04,15.04,and avoid the version 12.04,14.04,15.04; Upgrade suse linux_enterprise_debuginfo to a higher version than 11:sp4,and avoid the version 11:sp4; Upgrade suse studio_onsite to a higher version than 1.3,and avoid the version 1.3; Upgrade opensuse leap to a higher version than 42.1,and avoid the version 42.1; Upgrade opensuse opensuse to a higher version than 13.1,13.2,and avoid the version 13.1,13.2; Upgrade suse linux_enterprise_desktop to a higher version than 12,12:sp1,and avoid the version 12,12:sp1; Upgrade suse linux_enterprise_server to a higher version than 11:sp4,12,12:sp1,and avoid the version 11:sp4,12,12:sp1; Upgrade suse linux_enterprise_software_development_kit to a higher version than 11:sp4,12,12:sp1,and avoid the version 11:sp4,12,12:sp1; Upgrade oracle solaris to a higher version than 10,11.3,and avoid the version 10,11.3