Summary
It was discovered that Scilab did not properly sanitize XML inputs. An atacker
could use a crafted XML file to cause a denial of service or possibly execute arbitrary code.
Fixed packages 1
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · Pro 16.04 LTS Pro:16.04:LTS | scilab | 5.5.2-2ubuntu3+esm1 |
Vulnerabilities 4
-
Unscored —
An issue was discovered in libezxml.a in ezXML 0.8.6. The function ezxml_internal_dtd(), while parsing a crafted XML fi…
-
Unscored —
An issue was discovered in libezxml.a in ezXML 0.8.6. The function ezxml_internal_dtd() performs incorrect memory handl…
-
Unscored —
An issue was discovered in libezxml.a in ezXML 0.8.6. The function ezxml_parse_str() performs incorrect memory handling…
-
Unscored —
An issue was discovered in libezxml.a in ezXML 0.8.6. The function ezxml_decode() performs incorrect memory handling wh…