Denial of Service (DoS)

Overview Affected versions of this package are vulnerable to Denial of Service DoS. The XML parser in Xerces-C++ 2.5.0 allows remote attackers to cause a denial of service CPU consumption via XML attributes in a crafted XML document. Remediation There is no fixed version for xerces-c. References ...

Xerces-C++ DoS

Malcrafted XML document causes 100 CPU ussage for few minutes...

Security advisory - Xerces-C++ 2.5.0: Attribute blowup

Security Advisory Xerces-C++ 2.5.0: Attribute blowup denial-of-service Author: Amit Klein Release Date: October 2nd, 2004 Description: An attacker can craft a malicious XML document, which uses XML attributes in a way that inflicts a denial of service condition on the target machine XML parser. T...

xerces-c2 -- Attribute blowup denial-of-service

Amit Klein reports about Xerces-C++: An attacker can craft a malicious XML document, which uses XML attributes in a way that inflicts a denial of service condition on the target machine XML parser. The result of this attack is that the XML parser consumes all the CPU...