Red Hat Bugzilla – Bug 1220607
CVE-2015-2716 Mozilla: Buffer overflow when parsing compressed XML (MFSA 2015-54)
Last modified: 2018-05-18 00:20:27 EDT
Security researcher Ucha Gobejishvili used the Address Sanitizer tool to find a buffer overflow while parsing compressed XML content. This was due to an error in how buffer space is created and modified when handling large amounts of XML data. This results in a potentially exploitable crash. In general this flaw cannot be exploited through email in the Thunderbird product because scripting is disabled, but is potentially a risk in browser or browser-like contexts. External Reference: http://www.mozilla.org/security/announce/2015/mfsa2015-54.html Acknowledgements: Red Hat would like to thank the Mozilla project for reporting this issue. Upstream acknowledges Ucha Gobejishvili as the original reporter.
This issue has been addressed in the following products: Red Hat Enterprise Linux 6 Red Hat Enterprise Linux 7 Red Hat Enterprise Linux 5 Via RHSA-2015:0988 https://rhn.redhat.com/errata/RHSA-2015-0988.html
This issue has been addressed in the following products: Red Hat Enterprise Linux 5 Red Hat Enterprise Linux 7 Red Hat Enterprise Linux 6 Via RHSA-2015:1012 https://rhn.redhat.com/errata/RHSA-2015-1012.html
Created expat tracking bugs for this issue: Affects: fedora-all [bug 1232574]
The following patch was applied by Mozilla to fix this issue: https://hg.mozilla.org/releases/mozilla-esr31/rev/2f3e78643f5c
Statement: This issue affects the version of expat package as shipped with Red Hat Enterprise Linux 5, 6 and 7. Red Hat Product Security has rated this issue as having Moderate security impact, a future update may address this flaw. Red Hat Enterprise Linux 5 is now in Extended Life Cycle phase of the support and maintenance life cycle. This issue is not currently planned to be addressed in future updates.