FlawAtlas
Search the atlas
CVE-2016-1684 High

CVE-2016-1684

numbers.c in libxslt before 1.1.29, as used in Google Chrome before 51.0.2704.63, mishandles the i format token for xsl:number data, which allows remote attackers to cause a denial of service (integer overflow or resource consumption) or possibly have unspecified other impact via a crafted document.

Exploit probability 1.8%
Published June 5, 2016
Required by Not available
Last source change July 20, 2026

02 / AFFECTED SOFTWARE

Affected packages

Unknown Unknown

74 explicit affected versions

03 / CONNECTIONS

Connected vulnerabilities

related OPENSUSE-SU-2024:12948-1

04 / EVIDENCE

Source records

Open Source Vulnerabilities CVE-2016-1684

numbers.c in libxslt before 1.1.29, as used in Google Chrome before 51.0.2704.63, mishandles the i format token for xsl:number data, which allows remote attackers to cause a denial of service (integer overflow or resource consumption) or possibly have unspecified other impact via a crafted document.

View original source

05 / REFERENCES

Further evidence