http://lists.apple.com/archives/security-announce/2016/Jul/msg00000.html

http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00064.html

http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00006.html

http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00007.html

http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00010.html

http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00004.html

http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00029.html

http://packetstormsecurity.com/files/141350/ESET-Endpoint-Antivirus-6-Remote-Code-Execution.html

http://rhn.redhat.com/errata/RHSA-2016-2824.html

http://seclists.org/fulldisclosure/2017/Feb/68

http://support.eset.com/ca6333/

http://www.debian.org/security/2016/dsa-3582

http://www.mozilla.org/security/announce/2016/mfsa2016-68.html

http://www.openwall.com/lists/oss-security/2016/05/17/12

http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html

http://www.oracle.com/technetwork/topics/security/bulletinjul2016-3090568.html

http://www.securityfocus.com/bid/90729

http://www.securitytracker.com/id/1036348

http://www.securitytracker.com/id/1036415

http://www.securitytracker.com/id/1037705

http://www.ubuntu.com/usn/USN-2983-1

http://www.ubuntu.com/usn/USN-3044-1

https://access.redhat.com/errata/RHSA-2018:2486

https://bugzilla.mozilla.org/show_bug.cgi?id=1236923

https://bugzilla.redhat.com/show_bug.cgi?id=1296102

https://kc.mcafee.com/corporate/index?page=content&id=SB10365

https://security.gentoo.org/glsa/201701-21

https://source.android.com/security/bulletin/2016-11-01.html

https://support.apple.com/HT206903

https://www.tenable.com/security/tns-2016-20

An out-of-bounds read flaw was found in the way Expat processed certain input. A remote attacker could send specially crafted XML that, when parsed by an application using the Expat library, would cause that application to crash or, possibly, execute arbitrary code with the permission of the user running the application.

Expat allows context-dependent attackers to cause a denial of service (crash) or possibly execute arbitrary code via a malformed input document, which triggers a buffer overflow.

Red Hat, Inc. (AV:N/AC:M/Au:N/C:P/I:P/A:P)

https://access.redhat.com/errata/RHSA-2016:2824 [No Types Assigned]

https://access.redhat.com/security/cve/CVE-2016-0718 [No Types Assigned]

Expat allows context-dependent attackers to cause a denial of service (crash) or possibly execute arbitrary code via a malformed input document, which triggers a buffer overflow.

An out-of-bounds read flaw was found in the way Expat processed certain input. A remote attacker could send specially crafted XML that, when parsed by an application using the Expat library, would cause that application to crash or, possibly, execute arbitrary code with the permission of the user running the application.

Red Hat, Inc. (AV:N/AC:M/Au:N/C:P/I:P/A:P)

https://access.redhat.com/errata/RHSA-2016:2824 [No Types Assigned]

https://access.redhat.com/security/cve/CVE-2016-0718 [No Types Assigned]

NIST AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NIST AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

OR
     *cpe:2.3:o:suse:linux_enterprise_desktop:12:*:*:*:*:*:*:*
     *cpe:2.3:o:suse:linux_enterprise_desktop:12.0:sp1:*:*:*:*:*:*
     *cpe:2.3:o:suse:linux_enterprise_server:12:*:*:*:*:*:*:*
     *cpe:2.3:o:suse:linux_enterprise_server:12.0:sp1:*:*:*:*:*:*
     *cpe:2.3:o:suse:linux_enterprise_software_development_kit:12:*:*:*:*:*:*:*
     *cpe:2.3:o:suse:linux_enterprise_software_development_kit:12.0:sp1:*:*:*:*:*:*

OR
     *cpe:2.3:o:suse:linux_enterprise_desktop:12:-:*:*:*:*:*:*
     *cpe:2.3:o:suse:linux_enterprise_desktop:12:sp1:*:*:*:*:*:*
     *cpe:2.3:o:suse:linux_enterprise_server:12:-:*:*:*:*:*:*
     *cpe:2.3:o:suse:linux_enterprise_server:12:sp1:*:*:*:*:*:*
     *cpe:2.3:o:suse:linux_enterprise_software_development_kit:12:-:*:*:*:*:*:*
     *cpe:2.3:o:suse:linux_enterprise_software_development_kit:12:sp1:*:*:*:*:*:*

OR
     *cpe:2.3:a:mcafee:policy_auditor:*:*:*:*:*:*:*:* versions up to (excluding) 6.5.1

OR
     *cpe:2.3:a:python:python:*:*:*:*:*:*:*:* versions from (including) 2.7.0 up to (excluding) 2.7.15
     *cpe:2.3:a:python:python:*:*:*:*:*:*:*:* versions from (including) 3.3.0 up to (excluding) 3.3.7
     *cpe:2.3:a:python:python:*:*:*:*:*:*:*:* versions from (including) 3.4.0 up to (excluding) 3.4.7
     *cpe:2.3:a:python:python:*:*:*:*:*:*:*:* versions from (including) 3.5.0 up to (excluding) 3.5.4
     *cpe:2.3:a:python:python:*:*:*:*:*:*:*:* versions from (including) 3.6.0 up to (exc

https://kc.mcafee.com/corporate/index?page=content&id=SB10365 No Types Assigned

https://kc.mcafee.com/corporate/index?page=content&id=SB10365 Third Party Advisory

https://kc.mcafee.com/corporate/index?page=content&id=SB10365 [No Types Assigned]

OR
     *cpe:2.3:a:libexpat:expat:*:*:*:*:*:*:*:* versions from (excluding) 2.2.0

OR
     *cpe:2.3:a:libexpat_project:libexpat:*:*:*:*:*:*:*:* versions from (excluding) 2.2.0

OR
     *cpe:2.3:a:libexpat:expat:-:*:*:*:*:*:*:*

OR
     *cpe:2.3:a:libexpat:expat:*:*:*:*:*:*:*:* versions up to (excluding) 2.2.0

OR
     *cpe:2.3:a:mozilla:firefox:47.0.1:*:*:*:*:*:*:*

OR
     *cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:* versions up to (excluding) 48.0

OR
     *cpe:2.3:o:apple:mac_os_x:10.10.4:*:*:*:*:*:*:*

OR
     *cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:* versions from (including) 10.11.0 up to (including) 10.11.5

OR
     *cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:lts:*:*:*
     *cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*
     *cpe:2.3:o:canonical:ubuntu_linux:15.10:*:*:*:*:*:*:*
     *cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*

OR
     *cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:lts:*:*:*
     *cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*
     *cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*

OR
     *cpe:2.3:o:suse:linux_enterprise_desktop:12:*:*:*:*:*:*:*
     *cpe:2.3:o:suse:linux_enterprise_desktop:12.0:sp1:*:*:*:*:*:*
     *cpe:2.3:o:suse:linux_enterprise_server:12.0:sp1:*:*:*:*:*:*
     *cpe:2.3:o:suse:linux_enterprise_software_development_kit:12:*:*:*:*:*:*:*
     *cpe:2.3:o:suse:linux_enterprise_software_development_kit:12.0:sp1:*:*:*:*:*:*
     *cpe:2.3:o:suse:suse_linux_enterprise_server:12:*:*:*:*:*:*:*

OR
     *cpe:2.3:o:suse:linux_enterprise_desktop:12:*:*:*:*:*:*:*
     *cpe:2.3:o:suse:linux_enterprise_desktop:12.0:sp1:*:*:*:*:*:*
     *cpe:2.3:o:suse:linux_enterprise_server:12:*:*:*:*:*:*:*
     *cpe:2.3:o:suse:linux_enterprise_server:12.0:sp1:*:*:*:*:*:*
     *cpe:2.3:o:suse:linux_enterprise_software_development_kit:12:*:*:*:*:*:*:*
     *cpe:2.3:o:suse:linux_enterprise_software_development_kit:12.0:sp1:*:*:*:*:*:*

OR
     *cpe:2.3:o:opensuse:opensuse:13.1:*:*:*:*:*:*:*
     *cpe:2.3:o:opensuse:opensuse:13.2:*:*:*:*:*:*:*

http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00064.html No Types Assigned

http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00064.html Third Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00006.html No Types Assigned

http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00006.html Third Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00007.html No Types Assigned

http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00007.html Third Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00010.html No Types Assigned

http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00010.html Third Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00004.html No Types Assigned

http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00004.html Third Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00029.html No Types Assigned

http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00029.html Third Party Advisory

http://packetstormsecurity.com/files/141350/ESET-Endpoint-Antivirus-6-Remote-Code-Execution.html No Types Assigned

http://packetstormsecurity.com/files/141350/ESET-Endpoint-Antivirus-6-Remote-Code-Execution.html Third Party Advisory, VDB Entry

http://rhn.redhat.com/errata/RHSA-2016-2824.html No Types Assigned

http://rhn.redhat.com/errata/RHSA-2016-2824.html Third Party Advisory

http://seclists.org/fulldisclosure/2017/Feb/68 No Types Assigned

http://seclists.org/fulldisclosure/2017/Feb/68 Mailing List, Third Party Advisory

http://support.eset.com/ca6333/ No Types Assigned

http://support.eset.com/ca6333/ Third Party Advisory

http://www.debian.org/security/2016/dsa-3582 No Types Assigned

http://www.debian.org/security/2016/dsa-3582 Third Party Advisory

http://www.openwall.com/lists/oss-security/2016/05/17/12 No Types Assigned

http://www.openwall.com/lists/oss-security/2016/05/17/12 Mailing List, Third Party Advisory

http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html No Types Assigned

http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html Patch, Third Party Advisory

http://www.oracle.com/technetwork/topics/security/bulletinjul2016-3090568.html No Types Assigned

http://www.oracle.com/technetwork/topics/security/bulletinjul2016-3090568.html Third Party Advisory

http://www.securityfocus.com/bid/90729 No Types Assigned

http://www.securityfocus.com/bid/90729 Third Party Advisory, VDB Entry

http://www.securitytracker.com/id/1036348 No Types Assigned

http://www.securitytracker.com/id/1036348 Third Party Advisory, VDB Entry

http://www.securitytracker.com/id/1036415 No Types Assigned

http://www.securitytracker.com/id/1036415 Third Party Advisory, VDB Entry

http://www.securitytracker.com/id/1037705 No Types Assigned

http://www.securitytracker.com/id/1037705 Third Party Advisory, VDB Entry

http://www.ubuntu.com/usn/USN-2983-1 No Types Assigned

http://www.ubuntu.com/usn/USN-2983-1 Third Party Advisory

http://www.ubuntu.com/usn/USN-3044-1 No Types Assigned

http://www.ubuntu.com/usn/USN-3044-1 Third Party Advisory

https://access.redhat.com/errata/RHSA-2018:2486 No Types Assigned

https://access.redhat.com/errata/RHSA-2018:2486 Third Party Advisory

https://bugzilla.redhat.com/show_bug.cgi?id=1296102 Issue Tracking

https://bugzilla.redhat.com/show_bug.cgi?id=1296102 Issue Tracking, Third Party Advisory

https://security.gentoo.org/glsa/201701-21 No Types Assigned

https://security.gentoo.org/glsa/201701-21 Third Party Advisory

https://source.android.com/security/bulletin/2016-11-01.html No Types Assigned

https://source.android.com/security/bulletin/2016-11-01.html Third Party Advisory

https://www.tenable.com/security/tns-2016-20 No Types Assigned

https://www.tenable.com/security/tns-2016-20 Third Party Advisory

OR
     *cpe:2.3:o:novell:leap:42.1:*:*:*:*:*:*:*

OR
     *cpe:2.3:o:opensuse:leap:42.1:*:*:*:*:*:*:*

OR
     *cpe:2.3:o:suse:linux_enterprise_server:12:*:*:*:*:*:*:*

OR
     *cpe:2.3:o:suse:suse_linux_enterprise_server:12:*:*:*:*:*:*:*

https://access.redhat.com/errata/RHSA-2018:2486 [No Types Assigned]

http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html [No Types Assigned]

http://rhn.redhat.com/errata/RHSA-2016-2824.html [No Types Assigned]

https://www.tenable.com/security/tns-2016-20 [No Types Assigned]

http://www.securitytracker.com/id/1036348 [No Types Assigned]

http://www.securitytracker.com/id/1036415 [No Types Assigned]

http://www.securitytracker.com/id/1037705 [No Types Assigned]

https://security.gentoo.org/glsa/201701-21 [No Types Assigned]

http://packetstormsecurity.com/files/141350/ESET-Endpoint-Antivirus-6-Remote-Code-Execution.html [No Types Assigned]

http://seclists.org/fulldisclosure/2017/Feb/68 [No Types Assigned]

http://support.eset.com/ca6333/ [No Types Assigned]

http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00064.html [No Types Assigned]

http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00004.html [No Types Assigned]

http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00029.html [No Types Assigned]

http://www.securityfocus.com/bid/90729 [No Types Assigned]

http://www.ubuntu.com/usn/USN-3044-1 [No Types Assigned]

https://source.android.com/security/bulletin/2016-11-01.html [No Types Assigned]

http://www.oracle.com/technetwork/topics/security/bulletinjul2016-3090568.html

Configuration 1
     OR
          *cpe:2.3:o:novell:leap:42.1:*:*:*:*:*:*:*
Configuration 2
     OR
          *cpe:2.3:a:suse:studio_onsite:1.3:*:*:*:*:*:*:*
          *cpe:2.3:o:suse:linux_enterprise_software_development_kit:11:sp4:*:*:*:*:*:*
          *cpe:2.3:o:suse:linux_enterprise_server:11:sp4:*:*:*:*:*:*
          *cpe:2.3:a:suse:linux_enterprise_debuginfo:11:sp4:*:*:*:*:*:*
Configuration 3
     OR
          *cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*
Configuration 4
     OR
       

Configuration 1
     OR
          *cpe:2.3:a:mozilla:firefox:47.0.1:*:*:*:*:*:*:*
Configuration 2
     OR
          *cpe:2.3:o:apple:mac_os_x:10.10.4:*:*:*:*:*:*:*
Configuration 3
     OR
          *cpe:2.3:a:suse:studio_onsite:1.3:*:*:*:*:*:*:*
          *cpe:2.3:o:suse:linux_enterprise_software_development_kit:11:sp4:*:*:*:*:*:*
          *cpe:2.3:o:suse:linux_enterprise_server:11:sp4:*:*:*:*:*:*
          *cpe:2.3:a:suse:linux_enterprise_debuginfo:11:sp4:*:*:*:*:*:*
Configuration 4
     OR
  

http://lists.apple.com/archives/security-announce/2016/Jul/msg00000.html No Types Assigned

http://lists.apple.com/archives/security-announce/2016/Jul/msg00000.html Third Party Advisory, Mailing List

http://www.mozilla.org/security/announce/2016/mfsa2016-68.html No Types Assigned

http://www.mozilla.org/security/announce/2016/mfsa2016-68.html Third Party Advisory

https://bugzilla.mozilla.org/show_bug.cgi?id=1236923 No Types Assigned

https://bugzilla.mozilla.org/show_bug.cgi?id=1236923 Third Party Advisory, Issue Tracking

https://bugzilla.redhat.com/show_bug.cgi?id=1296102 No Types Assigned

https://bugzilla.redhat.com/show_bug.cgi?id=1296102 Issue Tracking

https://support.apple.com/HT206903 No Types Assigned

https://support.apple.com/HT206903 Third Party Advisory

http://www.mozilla.org/security/announce/2016/mfsa2016-68.html

https://bugzilla.mozilla.org/show_bug.cgi?id=1236923

http://lists.apple.com/archives/security-announce/2016/Jul/msg00000.html

https://support.apple.com/HT206903

Configuration 1
     OR
          *cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*
          *cpe:2.3:o:canonical:ubuntu_linux:15.10:*:*:*:*:*:*:*
          *cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*
          *cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:lts:*:*:*
Configuration 2
     OR
          *cpe:2.3:a:libexpat:expat:-:*:*:*:*:*:*:*
Configuration 3
     OR
          *cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*

Configuration 1
     OR
          *cpe:2.3:o:novell:leap:42.1:*:*:*:*:*:*:*
Configuration 2
     OR
          *cpe:2.3:a:suse:studio_onsite:1.3:*:*:*:*:*:*:*
          *cpe:2.3:o:suse:linux_enterprise_software_development_kit:11:sp4:*:*:*:*:*:*
          *cpe:2.3:o:suse:linux_enterprise_server:11:sp4:*:*:*:*:*:*
          *cpe:2.3:a:suse:linux_enterprise_debuginfo:11:sp4:*:*:*:*:*:*
Configuration 3
     OR
          *cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*
Configuration 4
     OR
       

http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00010.html

http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00006.html

http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00007.html

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

(AV:N/AC:L/Au:N/C:P/I:P/A:P)

CWE-119

Configuration 1
     OR
          *cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*
          *cpe:2.3:o:canonical:ubuntu_linux:15.10:*:*:*:*:*:*:*
          *cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*
          *cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:lts:*:*:*
Configuration 2
     OR
          *cpe:2.3:a:libexpat:expat:-:*:*:*:*:*:*:*
Configuration 3
     OR
          *cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*