Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2015-1265 State: PUBLISHED Published: 2015-05-20T10:00:00 Last Updated: 2024-08-06T04:40:18.446Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unspecified vulnerabilities in Google Chrome before 43.0.2357.65 allow attackers to cause a denial of service or possibly have other impact via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - https://code.google.com/p/chromium/issues/detail?id=445741 - https://code.google.com/p/chromium/issues/detail?id=413534 - https://code.google.com/p/chromium/issues/detail?id=448057 - http://lists.opensuse.org/opensuse-updates/2015-05/msg00091.html - https://code.google.com/p/chromium/issues/detai
057 - http://lists.opensuse.org/opensuse-updates/2015-05/msg00091.html - https://code.google.com/p/chromium/issues/detail?id=484270 - http://googlechromereleases.blogspot.com/2015/05/stable-channel-update_19.html - https://code.google.com/p/chromium/issues/detail?id=464792 - https://www.exploit-db.com/exploits/37766/ - https://code.google.com/p/chromium/issues/detail?id=485412 - https://code.google.com/p/chromium/issues/detail?id=454157 - https://code.google.com/p/chromium/issues/detail?id=467644 - http://www.securityfocus.com/bid/74727 - https://security.gentoo.org/glsa/201506-04 - http://lists.opensuse.org/opensuse-updates/2015-11/msg00015.html - http://www.securitytracker.com/id/1032375 -
1506-04 - http://lists.opensuse.org/opensuse-updates/2015-11/msg00015.html - http://www.securitytracker.com/id/1032375 - http://www.debian.org/security/2015/dsa-3267 - https://code.google.com/p/chromium/issues/detail?id=476107 - https://code.google.com/p/chromium/issues/detail?id=475070 - https://code.google.com/p/chromium/issues/detail?id=465426 - https://code.google.com/p/chromium/issues/detail?id=458026 - https://code.google.com/p/chromium/issues/detail?id=474784 - https://code.google.com/p/chromium/issues/detail?id=464642 - https://code.google.com/p/chromium/issues/detail?id=489518 - https://code.google.com/p/chromium/issues/detail?id=485419 - https://code.google.com/p/chromium/issues/de
il?id=489518 - https://code.google.com/p/chromium/issues/detail?id=485419 - https://code.google.com/p/chromium/issues/detail?id=467372
CVE ID: CVE-2015-1266 State: PUBLISHED Published: 2015-06-26T14:00:00 Last Updated: 2024-08-06T04:40:18.199Z Vendors: n/a Products: n/a Problem Types: n/a Description: content/browser/webui/content_web_ui_controller_factory.cc in Google Chrome before 43.0.2357.130 does not properly consider the scheme in determining whether a URL is associated with a WebUI SiteInstance, which allows remote attackers to bypass intended access restrictions via a similar URL, as demonstrated by use of http://gpu when there is a WebUI class for handling chrome://gpu requests. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-updates/2015-11/msg00012.html - http:/
Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-updates/2015-11/msg00012.html - http://www.securitytracker.com/id/1032731 - http://www.securityfocus.com/bid/75333 - http://www.ubuntu.com/usn/USN-2652-1 - http://rhn.redhat.com/errata/RHSA-2015-1188.html - http://lists.opensuse.org/opensuse-updates/2015-06/msg00057.html - http://googlechromereleases.blogspot.com/2015/06/chrome-stable-update.html - https://codereview.chromium.org/1129123004/ - https://security.gentoo.org/glsa/201507-18 - https://code.google.com/p/chromium/issues/detail?id=464922 - http://www.debian.org/security/2015/dsa-3315
CVE ID: CVE-2015-1267 State: PUBLISHED Published: 2015-06-26T14:00:00 Last Updated: 2024-08-06T04:40:18.375Z Vendors: n/a Products: n/a Problem Types: n/a Description: Blink, as used in Google Chrome before 43.0.2357.130, does not properly restrict the creation context during creation of a DOM wrapper, which allows remote attackers to bypass the Same Origin Policy via crafted JavaScript code that uses a Blink public API, related to WebArrayBufferConverter.cpp, WebBlob.cpp, WebDOMError.cpp, and WebDOMFileSystem.cpp. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-updates/2015-11/msg00012.html - http://www.securitytracker.com/id/1032731 - htt
es: - http://lists.opensuse.org/opensuse-updates/2015-11/msg00012.html - http://www.securitytracker.com/id/1032731 - https://codereview.chromium.org/1174343003/ - http://www.ubuntu.com/usn/USN-2652-1 - http://rhn.redhat.com/errata/RHSA-2015-1188.html - http://lists.opensuse.org/opensuse-updates/2015-06/msg00057.html - https://code.google.com/p/chromium/issues/detail?id=497507 - http://googlechromereleases.blogspot.com/2015/06/chrome-stable-update.html - https://security.gentoo.org/glsa/201507-18 - https://src.chromium.org/viewvc/blink?revision=196755&view=revision - http://www.securityfocus.com/bid/75334 - http://www.debian.org/security/2015/dsa-3315
CVE ID: CVE-2015-1268 State: PUBLISHED Published: 2015-06-26T14:00:00 Last Updated: 2024-08-06T04:40:17.084Z Vendors: n/a Products: n/a Problem Types: n/a Description: bindings/scripts/v8_types.py in Blink, as used in Google Chrome before 43.0.2357.130, does not properly select a creation context for a return value's DOM wrapper, which allows remote attackers to bypass the Same Origin Policy via crafted JavaScript code, as demonstrated by use of a data: URL. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-updates/2015-11/msg00012.html - https://src.chromium.org/viewvc/blink?revision=196373&view=revision - http://www.securitytracker.com/id/1
sg00012.html - https://src.chromium.org/viewvc/blink?revision=196373&view=revision - http://www.securitytracker.com/id/1032731 - http://www.securityfocus.com/bid/75332 - http://www.ubuntu.com/usn/USN-2652-1 - http://rhn.redhat.com/errata/RHSA-2015-1188.html - http://lists.opensuse.org/opensuse-updates/2015-06/msg00057.html - http://googlechromereleases.blogspot.com/2015/06/chrome-stable-update.html - https://code.google.com/p/chromium/issues/detail?id=494640 - https://security.gentoo.org/glsa/201507-18 - http://www.debian.org/security/2015/dsa-3315
CVE ID: CVE-2015-1269 State: PUBLISHED Published: 2015-06-26T14:00:00 Last Updated: 2024-08-06T04:40:18.231Z Vendors: n/a Products: n/a Problem Types: n/a Description: The DecodeHSTSPreloadRaw function in net/http/transport_security_state.cc in Google Chrome before 43.0.2357.130 does not properly canonicalize DNS hostnames before making comparisons to HSTS or HPKP preload entries, which allows remote attackers to bypass intended access restrictions via a string that (1) ends in a . (dot) character or (2) is not entirely lowercase. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-updates/2015-11/msg00012.html - http://www.securitytracker.com/
tainer: References: - http://lists.opensuse.org/opensuse-updates/2015-11/msg00012.html - http://www.securitytracker.com/id/1032731 - http://www.securityfocus.com/bid/75336 - https://codereview.chromium.org/1149753002 - http://www.ubuntu.com/usn/USN-2652-1 - http://rhn.redhat.com/errata/RHSA-2015-1188.html - http://lists.opensuse.org/opensuse-updates/2015-06/msg00057.html - http://googlechromereleases.blogspot.com/2015/06/chrome-stable-update.html - https://security.gentoo.org/glsa/201507-18 - https://code.google.com/p/chromium/issues/detail?id=461481 - http://www.debian.org/security/2015/dsa-3315
CVE ID: CVE-2015-1270 State: PUBLISHED Published: 2015-07-23T00:00:00 Last Updated: 2024-08-06T04:40:18.188Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ucnv_io_getConverterName function in common/ucnv_io.cpp in International Components for Unicode (ICU), as used in Google Chrome before 44.0.2403.89, mishandles converter names with initial x- substrings, which allows remote attackers to cause a denial of service (read of uninitialized memory) or possibly have unspecified other impact via a crafted file. Additional Analyst Notes: - CVE Program Container: References: - https://codereview.chromium.org/1157143002/ - http://rhn.redhat.com/errata/RHSA-2015-1499.html - http://lis
eferences: - https://codereview.chromium.org/1157143002/ - http://rhn.redhat.com/errata/RHSA-2015-1499.html - http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00038.html - http://www.securitytracker.com/id/1033031 - https://code.google.com/p/chromium/issues/detail?id=444573 - http://www.debian.org/security/2015/dsa-3360 - http://www.ubuntu.com/usn/USN-2740-1 - https://security.gentoo.org/glsa/201603-09 - http://www.securityfocus.com/bid/75973 - http://googlechromereleases.blogspot.com/2015/07/stable-channel-update_21.html - https://chromium.googlesource.com/chromium/deps/icu/+/f1ad7f9ba957571dc692ea3e187612c685615e19 - http://www.debian.org/security/2015/dsa-3315 - http://www.
hromium/deps/icu/+/f1ad7f9ba957571dc692ea3e187612c685615e19 - http://www.debian.org/security/2015/dsa-3315 - http://www.oracle.com/technetwork/topics/security/bulletinoct2015-2511968.html
CVE ID: CVE-2015-1271 State: PUBLISHED Published: 2015-07-23T00:00:00 Last Updated: 2024-08-06T04:40:18.259Z Vendors: n/a Products: n/a Problem Types: n/a Description: PDFium, as used in Google Chrome before 44.0.2403.89, does not properly handle certain out-of-memory conditions, which allows remote attackers to cause a denial of service (heap-based buffer overflow) or possibly have unspecified other impact via a crafted PDF document that triggers a large memory allocation. Additional Analyst Notes: - CVE Program Container: References: - https://codereview.chromium.org/1226403008 - http://rhn.redhat.com/errata/RHSA-2015-1499.html - http://lists.opensuse.org/opensuse-security-announce/2015-07
403008 - http://rhn.redhat.com/errata/RHSA-2015-1499.html - http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00038.html - http://www.securitytracker.com/id/1033031 - https://code.google.com/p/chromium/issues/detail?id=446032 - https://security.gentoo.org/glsa/201603-09 - http://www.securityfocus.com/bid/75973 - http://googlechromereleases.blogspot.com/2015/07/stable-channel-update_21.html - http://www.debian.org/security/2015/dsa-3315
CVE ID: CVE-2015-1272 State: PUBLISHED Published: 2015-07-23T00:00:00 Last Updated: 2024-08-06T04:40:18.251Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in the GPU process implementation in Google Chrome before 44.0.2403.89 allows remote attackers to cause a denial of service or possibly have unspecified other impact by leveraging the continued availability of a GPUChannelHost data structure during Blink shutdown, related to content/browser/gpu/browser_gpu_channel_host_factory.cc and content/renderer/render_thread_impl.cc. Additional Analyst Notes: - CVE Program Container: References: - https://codereview.chromium.org/1128233004/ - http://rhn.redha
nal Analyst Notes: - CVE Program Container: References: - https://codereview.chromium.org/1128233004/ - http://rhn.redhat.com/errata/RHSA-2015-1499.html - https://codereview.chromium.org/867553003/ - http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00038.html - http://www.securitytracker.com/id/1033031 - https://code.google.com/p/chromium/issues/detail?id=451456 - https://security.gentoo.org/glsa/201603-09 - http://www.securityfocus.com/bid/75973 - http://googlechromereleases.blogspot.com/2015/07/stable-channel-update_21.html - http://www.debian.org/security/2015/dsa-3315
CVE ID: CVE-2015-1273 State: PUBLISHED Published: 2015-07-23T00:00:00 Last Updated: 2024-08-06T04:40:18.242Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in j2k.c in OpenJPEG before r3002, as used in PDFium in Google Chrome before 44.0.2403.89, allows remote attackers to cause a denial of service or possibly have unspecified other impact via invalid JPEG2000 data in a PDF document. Additional Analyst Notes: - CVE Program Container: References: - https://pdfium.googlesource.com/pdfium/+/cddfde0cddbc8467e0d5fa04c30405ee257750fc - http://rhn.redhat.com/errata/RHSA-2015-1499.html - http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00038.html
//rhn.redhat.com/errata/RHSA-2015-1499.html - http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00038.html - http://www.securitytracker.com/id/1033031 - https://code.google.com/p/chromium/issues/detail?id=459215 - https://security.gentoo.org/glsa/201603-09 - http://www.securityfocus.com/bid/75973 - http://googlechromereleases.blogspot.com/2015/07/stable-channel-update_21.html - http://www.debian.org/security/2015/dsa-3315
CVE ID: CVE-2015-1274 State: PUBLISHED Published: 2015-07-23T00:00:00 Last Updated: 2024-08-06T04:40:17.098Z Vendors: n/a Products: n/a Problem Types: n/a Description: Google Chrome before 44.0.2403.89 does not ensure that the auto-open list omits all dangerous file types, which makes it easier for remote attackers to execute arbitrary code by providing a crafted file and leveraging a user's previous "Always open files of this type" choice, related to download_commands.cc and download_prefs.cc. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2015-1499.html - http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00038.html - http://
at.com/errata/RHSA-2015-1499.html - http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00038.html - http://www.securitytracker.com/id/1033031 - https://codereview.chromium.org/1165893004/ - https://code.google.com/p/chromium/issues/detail?id=461858 - https://security.gentoo.org/glsa/201603-09 - http://www.securityfocus.com/bid/75973 - http://googlechromereleases.blogspot.com/2015/07/stable-channel-update_21.html - http://www.debian.org/security/2015/dsa-3315
CVE ID: CVE-2015-1275 State: PUBLISHED Published: 2015-07-23T00:00:00 Last Updated: 2024-08-06T04:40:17.081Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in org/chromium/chrome/browser/UrlUtilities.java in Google Chrome before 44.0.2403.89 on Android allows remote attackers to inject arbitrary web script or HTML via a crafted intent: URL, as demonstrated by a trailing alert(document.cookie);// substring, aka "Universal XSS (UXSS)." Additional Analyst Notes: - CVE Program Container: References: - https://codereview.chromium.org/1059413004/ - http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00038.html - http://www.securitytr
ium.org/1059413004/ - http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00038.html - http://www.securitytracker.com/id/1033031 - https://security.gentoo.org/glsa/201603-09 - http://www.securityfocus.com/bid/75973 - http://googlechromereleases.blogspot.com/2015/07/stable-channel-update_21.html - https://code.google.com/p/chromium/issues/detail?id=462843
CVE ID: CVE-2015-1276 State: PUBLISHED Published: 2015-07-23T00:00:00 Last Updated: 2024-08-06T04:40:18.390Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in content/browser/indexed_db/indexed_db_backing_store.cc in the IndexedDB implementation in Google Chrome before 44.0.2403.89 allows remote attackers to cause a denial of service or possibly have unspecified other impact by leveraging an abort action before a certain write operation. Additional Analyst Notes: - CVE Program Container: References: - https://code.google.com/p/chromium/issues/detail?id=472614 - http://rhn.redhat.com/errata/RHSA-2015-1499.html - http://lists.opensuse.org/opensuse-secur
um/issues/detail?id=472614 - http://rhn.redhat.com/errata/RHSA-2015-1499.html - http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00038.html - http://www.securitytracker.com/id/1033031 - https://security.gentoo.org/glsa/201603-09 - http://www.securityfocus.com/bid/75973 - http://googlechromereleases.blogspot.com/2015/07/stable-channel-update_21.html - http://www.debian.org/security/2015/dsa-3315 - https://codereview.chromium.org/1060613002/
CVE ID: CVE-2015-1277 State: PUBLISHED Published: 2015-07-23T00:00:00 Last Updated: 2024-08-06T04:40:17.090Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in the accessibility implementation in Google Chrome before 44.0.2403.89 allows remote attackers to cause a denial of service or possibly have unspecified other impact by leveraging lack of certain validity checks for accessibility-tree data structures. Additional Analyst Notes: - CVE Program Container: References: - https://code.google.com/p/chromium/issues/detail?id=479743 - http://rhn.redhat.com/errata/RHSA-2015-1499.html - http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00038.ht
p://rhn.redhat.com/errata/RHSA-2015-1499.html - http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00038.html - http://www.securitytracker.com/id/1033031 - https://codereview.chromium.org/1144363004/ - https://security.gentoo.org/glsa/201603-09 - https://codereview.chromium.org/1151393006/ - http://www.securityfocus.com/bid/75973 - http://googlechromereleases.blogspot.com/2015/07/stable-channel-update_21.html - http://www.debian.org/security/2015/dsa-3315
CVE ID: CVE-2015-1278 State: PUBLISHED Published: 2015-07-23T00:00:00 Last Updated: 2024-08-06T04:40:18.546Z Vendors: n/a Products: n/a Problem Types: n/a Description: content/browser/web_contents/web_contents_impl.cc in Google Chrome before 44.0.2403.89 does not ensure that a PDF document's modal dialog is closed upon navigation to an interstitial page, which allows remote attackers to spoof URLs via a crafted document, as demonstrated by the alert_dialog.pdf document. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2015-1499.html - https://codereview.chromium.org/1156663004/ - http://lists.opensuse.org/opensuse-security-announce/2015-07/ms
499.html - https://codereview.chromium.org/1156663004/ - http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00038.html - http://www.securitytracker.com/id/1033031 - https://security.gentoo.org/glsa/201603-09 - https://codereview.chromium.org/1150843002/ - http://www.securityfocus.com/bid/75973 - http://googlechromereleases.blogspot.com/2015/07/stable-channel-update_21.html - https://code.google.com/p/chromium/issues/detail?id=482380 - http://www.debian.org/security/2015/dsa-3315
CVE ID: CVE-2015-1279 State: PUBLISHED Published: 2015-07-23T00:00:00 Last Updated: 2024-08-06T04:40:18.235Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in the CJBig2_Image::expand function in fxcodec/jbig2/JBig2_Image.cpp in PDFium, as used in Google Chrome before 44.0.2403.89, allows remote attackers to cause a denial of service (heap-based buffer overflow) or possibly have unspecified other impact via large height and stride values. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2015-1499.html - https://codereview.chromium.org/1241493002 - http://lists.opensuse.org/opensuse-security-announce/2015-07/msg000
.html - https://codereview.chromium.org/1241493002 - http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00038.html - http://www.securitytracker.com/id/1033031 - https://code.google.com/p/chromium/issues/detail?id=483981 - https://security.gentoo.org/glsa/201603-09 - http://www.securityfocus.com/bid/75973 - https://codereview.chromium.org/1237723002 - http://googlechromereleases.blogspot.com/2015/07/stable-channel-update_21.html - http://www.debian.org/security/2015/dsa-3315
CVE ID: CVE-2015-1280 State: PUBLISHED Published: 2015-07-23T00:00:00 Last Updated: 2024-08-06T04:40:18.181Z Vendors: n/a Products: n/a Problem Types: n/a Description: SkPictureShader.cpp in Skia, as used in Google Chrome before 44.0.2403.89, allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact by leveraging access to a renderer process and providing crafted serialized data. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2015-1499.html - http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00038.html - http://www.securitytracker.com/id/1033031 - https://codereview.chro
g/opensuse-security-announce/2015-07/msg00038.html - http://www.securitytracker.com/id/1033031 - https://codereview.chromium.org/1151663002 - https://code.google.com/p/chromium/issues/detail?id=486947 - https://security.gentoo.org/glsa/201603-09 - http://www.securityfocus.com/bid/75973 - http://googlechromereleases.blogspot.com/2015/07/stable-channel-update_21.html - http://www.debian.org/security/2015/dsa-3315
CVE ID: CVE-2015-1281 State: PUBLISHED Published: 2015-07-23T00:00:00 Last Updated: 2024-08-06T04:40:18.573Z Vendors: n/a Products: n/a Problem Types: n/a Description: core/loader/ImageLoader.cpp in Blink, as used in Google Chrome before 44.0.2403.89, does not properly determine the V8 context of a microtask, which allows remote attackers to bypass Content Security Policy (CSP) restrictions by providing an image from an unintended source. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2015-1499.html - http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00038.html - http://www.securitytracker.com/id/1033031 - https://src.chromium
.org/opensuse-security-announce/2015-07/msg00038.html - http://www.securitytracker.com/id/1033031 - https://src.chromium.org/viewvc/blink?revision=196071&view=revision - https://code.google.com/p/chromium/issues/detail?id=487155 - https://security.gentoo.org/glsa/201603-09 - http://www.securityfocus.com/bid/75973 - http://googlechromereleases.blogspot.com/2015/07/stable-channel-update_21.html - http://www.debian.org/security/2015/dsa-3315
CVE ID: CVE-2015-1282 State: PUBLISHED Published: 2015-07-23T00:00:00 Last Updated: 2024-08-06T04:40:18.554Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple use-after-free vulnerabilities in fpdfsdk/src/javascript/Document.cpp in PDFium, as used in Google Chrome before 44.0.2403.89, allow remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted PDF document, related to the (1) Document::delay and (2) Document::DoFieldDelay functions. Additional Analyst Notes: - CVE Program Container: References: - https://pdfium.googlesource.com/pdfium/+/4ff7a4246c81a71b4f878e959b3ca304cd76ec8a - http://rhn.redhat.com/errata/RHSA-2015-1499.html
um.googlesource.com/pdfium/+/4ff7a4246c81a71b4f878e959b3ca304cd76ec8a - http://rhn.redhat.com/errata/RHSA-2015-1499.html - http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00038.html - http://www.securitytracker.com/id/1033031 - https://code.google.com/p/chromium/issues/detail?id=487928 - https://security.gentoo.org/glsa/201603-09 - http://www.securityfocus.com/bid/75973 - http://googlechromereleases.blogspot.com/2015/07/stable-channel-update_21.html - http://www.debian.org/security/2015/dsa-3315
CVE ID: CVE-2015-1283 State: PUBLISHED Published: 2015-07-23T00:00:00 Last Updated: 2024-08-06T04:40:17.858Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple integer overflows in the XML_GetBuffer function in Expat through 2.1.0, as used in Google Chrome before 44.0.2403.89 and other products, allow remote attackers to cause a denial of service (heap-based buffer overflow) or possibly have unspecified other impact via crafted XML data, a related issue to CVE-2015-2716. Additional Analyst Notes: - CVE Program Container: References: - https://www.tenable.com/security/tns-2016-20 - http://rhn.redhat.com/errata/RHSA-2015-1499.html - https://code.google.com/p/chromium/issues/de