Heap overflow

2013-08-2022:55:00

PRIOn knowledge base

www.prio-n.com

8.6 High

AI Score

Confidence

High

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.051 Low

EPSS

Percentile

92.8%

JSON

Heap-based buffer overflow in the Exclusive Canonicalization functionality (xsec/canon/XSECC14n20010315.cpp) in Apache Santuario XML Security for C++ (aka xml-security-c) before 1.7.1 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted PrefixList attribute.

CPENameOperatorVersion
xml_security_for_c\\+\\+eq1.6.0
xml_security_for_c\\+\\+eq1.1.0
xml_security_for_c\\+\\+eq1.6.1
xml_security_for_c\\+\\+eq1.2.1
xml_security_for_c\\+\\+eq1.5.1
xml_security_for_c\\+\\+eq1.5.0
xml_security_for_c\\+\\+eq0.2.0
xml_security_for_c\\+\\+eq1.3.0
xml_security_for_c\\+\\+le1.7.0
xml_security_for_c\\+\\+eq1.4.0

Name	Operator	Version
xml_security_for_c\\+\\+	eq	1.6.0
xml_security_for_c\\+\\+	eq	1.1.0
xml_security_for_c\\+\\+	eq	1.6.1
xml_security_for_c\\+\\+	eq	1.2.1
xml_security_for_c\\+\\+	eq	1.5.1
xml_security_for_c\\+\\+	eq	1.5.0
xml_security_for_c\\+\\+	eq	0.2.0
xml_security_for_c\\+\\+	eq	1.3.0
xml_security_for_c\\+\\+	le	1.7.0
xml_security_for_c\\+\\+	eq	1.4.0