CVE-2017-12627

2018-02-2800:00:00

apache

www.cve.org

AI Score

9.4

Confidence

High

EPSS

0.028

Percentile

90.6%

JSON

In Apache Xerces-C XML Parser library before 3.2.1, processing of external DTD paths can result in a null pointer dereference under certain conditions.

CNA Affected

[
  {
    "product": "Apache Xerces C++",
    "vendor": "Apache Software Foundation",
    "versions": [
      {
        "status": "affected",
        "version": "< 3.2.1"
      }
    ]
  }
]