CVE-2008-4482

EUVD-2008-4463
The XML parser in Xerces-C++ before 3.0.0 allows context-dependent attackers to cause a denial of service (stack consumption and crash) via an XML schema definition with a large maxOccurs value, which triggers excessive memory consumption during validation of an XML file.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
7.8 UNKNOWN
NETWORK
LOW
AV:N/AC:L/Au:N/C:N/I:N/A:C
Base Score
CVSS 3.x
EPSS Score
Percentile: 83%
Affected Products (NVD)
VendorProductVersion
apachexerces-c\+\+
𝑥
≤ 2.8.0
apachexerces-c\+\+
1.0.0
apachexerces-c\+\+
1.0.1
apachexerces-c\+\+
1.1.0
apachexerces-c\+\+
1.2.0
apachexerces-c\+\+
1.3.0
apachexerces-c\+\+
1.4.0
apachexerces-c\+\+
1.5.0
apachexerces-c\+\+
1.6.0
apachexerces-c\+\+
1.7.0
apachexerces-c\+\+
2.0.0
apachexerces-c\+\+
2.1.0
apachexerces-c\+\+
2.2.0
apachexerces-c\+\+
2.3.0
apachexerces-c\+\+
2.4.0
apachexerces-c\+\+
2.5.0
apachexerces-c\+\+
2.6.0
apachexerces-c\+\+
2.7.0
𝑥
= Vulnerable software versions
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
xerces-c2
dapper
dne
feisty
dne
gutsy
dne
hardy
dne
intrepid
ignored
jaunty
ignored
karmic
ignored
Common Weakness Enumeration
References
http://issues.apache.org/jira/browse/XERCESC-1051
http://secunia.com/advisories/32108
http://www.securityfocus.com/bid/31533
http://xerces.apache.org/xerces-c/releases.html
https://exchange.xforce.ibmcloud.com/vulnerabilities/45596
http://issues.apache.org/jira/browse/XERCESC-1051
http://secunia.com/advisories/32108
http://www.securityfocus.com/bid/31533
http://xerces.apache.org/xerces-c/releases.html
https://exchange.xforce.ibmcloud.com/vulnerabilities/45596