Summary
It was discovered that VTK incorrectly handled certain XML files in the
embedded Expat library. An attacker could possibly use this issue to cause
a denial of service or expose sensitive information.
Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · Pro 14.04 LTS Pro:14.04:LTS | vtk | 5.8.0-14.1ubuntu3+esm1 |
| Ubuntu · Pro 16.04 LTS Pro:16.04:LTS | vtk | 5.10.1+dfsg-2.1ubuntu0.1~esm1 |
Vulnerabilities 2
-
High 7.5
In libexpat in Expat before 2.2.7, XML input including XML names that contain a large number of colons could make the X…
-
Medium 6.5
In libexpat before 2.2.8, crafted XML input could fool the parser into changing from DTD parsing to document parsing to…