xerces-c: arbitrary code execution

2016-06-25T00:00:00
ID ASA-201606-22
Type archlinux
Reporter Arch Linux
Modified 2016-06-25T00:00:00

Description

The DTDScanner fails to account for the fact that peeking characters in the XMLReader class can raise an exception if an invalid character is encountered, and the exception crosses stack frames in an unsafe way that causes a higher level exception handler to access an already-freed object.