XmlLite Runtime Denial of Service Vulnerability

2019-08-13T07:00:00
ID MS:CVE-2019-1187
Type mscve
Reporter Microsoft
Modified 2019-08-13T07:00:00

Description

A denial of service vulnerability exists when the XmlLite runtime (XmlLite.dll) improperly parses XML input. An attacker who successfully exploited this vulnerability could cause a denial of service against an XML application.

A remote unauthenticated attacker could exploit this vulnerability by issuing specially crafted requests to an XML application.

The update addresses the vulnerability by correcting how the XmlLite runtime parses XML input.