CVE-2009-1885
11.08.2009, 18:30
Stack consumption vulnerability in validators/DTD/DTDScanner.cpp in Apache Xerces C++ 2.7.0 and 2.8.0 allows context-dependent attackers to cause a denial of service (application crash) via vectors involving nested parentheses and invalid byte values in "simply nested DTD structures," as demonstrated by the Codenomicon XML fuzzing framework.Enginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| apache | xerces-c\+\+ | 2.7.0 |
| apache | xerces-c\+\+ | 2.8.0 |
𝑥
= Vulnerable software versions
Debian Releases
Ubuntu Releases
openSUSE / SLES Releases
openSUSE Product | |||||||||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| libxerces-c-3_1 |
| ||||||||||||||||||||||||||||||
| libxerces-c-3_1-32bit |
| ||||||||||||||||||||||||||||||
| libxerces-c-devel |
|
Common Weakness Enumeration
References