CVE-2016-0729

Multiple buffer overflows in 1 internal/XMLReader.cpp, 2 util/XMLURL.cpp, and 3 util/XMLUri.cpp in the XML Parser library in Apache Xerces-C before 3.1.3 allow remote attackers to cause a denial of service segmentation fault or memory corruption or possibly execute arbitrary code via a crafted...

Apache Xerces-C XML Parser < 3.1.2 - DoS POC

Exploit for linux platform in category dos / poc Exploit Title: Apache Xerces-C XML Parser file.xml $ DOMPrint ./file.xml Ubuntu 15.04 libxerces-c3.1 package Segmentation fault $ ./DOMPrint ./file.xml ASAN Enabled build =================================================================...

Apache Xerces-C XML Parser 3.1.2 - Denial of Service (PoC)

Apache Xerces-C XML Parser 3.1.2 - Denial of Service PoC Exploit Title: Apache Xerces-C XML Parser file.xml $ DOMPrint ./file.xml Ubuntu 15.04 libxerces-c3.1 package Segmentation fault $ ./DOMPrint ./file.xml ASAN Enabled build =================================================================...

CVE-2015-0252

internal/XMLReader.cpp in Apache Xerces-C before 3.1.2 allows remote attackers to cause a denial of service segmentation fault and crash via crafted XML data...

CVE-2015-0252

internal/XMLReader.cpp in Apache Xerces-C before 3.1.2 allows remote attackers to cause a denial of service segmentation fault and crash via crafted XML data...

Design/Logic Flaw

internal/XMLReader.cpp in Apache Xerces-C before 3.1.2 allows remote attackers to cause a denial of service segmentation fault and crash via crafted XML data...

UBUNTU-CVE-2015-0252

internal/XMLReader.cpp in Apache Xerces-C before 3.1.2 allows remote attackers to cause a denial of service segmentation fault and crash via crafted XML data...

CVE-2015-0252

internal/XMLReader.cpp in Apache Xerces-C before 3.1.2 allows remote attackers to cause a denial of service segmentation fault and crash via crafted XML data...

CVE-2015-0252

internal/XMLReader.cpp in Apache Xerces-C before 3.1.2 allows remote attackers to cause a denial of service segmentation fault and crash via crafted XML data...

CVE-2015-0252

CVE-2015-0252 affects the Xerces-C XML parser. A flaw in how the parser processes certain malformed XML caused a crash (segmentation fault) in xerces-c’s XMLReader, leading to a denial of service. Connected advisories confirm a patch was backported and an updated xerces-c package is released (Cen...

KLA10496 Denial of service vulnerability in Apache Xerces

An unspecified vulnerability was found in Apache Xerces-C. By exploiting this vulnerability malicious users can cause denial of service. This vulnerability can be exploited remotely via a specially designed XML data. Original advisories Apache bulletin Exploitation Public exploits exist for this...

Xerces-C Security Advisory [CVE-2015-0252]

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 CVE-2015-0252: Apache Xerces-C XML Parser Crashes on Malformed Input Severity: Important Vendor: The Apache Software Foundation Versions Affected: Apache Xerces-C XML Parser library versions prior to V3.1.2 Description: The Xerces-C XML parser...

Apache Xerces-C DoS

Memory corruption on XML parsing...

PT-2015-4544 · Apache +4 · Apache Xerces-C +4

Name of the Vulnerable Software and Affected Versions: Apache Xerces-C versions prior to 3.1.2 Description: The issue allows remote attackers to cause a denial of service, resulting in a segmentation fault and crash, via crafted XML data. This is due to a problem in the internal/XMLReader.cpp fil...

[SECURITY] Fedora 19 Update: xerces-j2-2.11.0-15.fc19

Welcome to the future! Xerces2 is the next generation of high performance, fully compliant XML parsers in the Apache Xerces family. This new version of Xerces introduces the Xerces Native Interface XNI, a complete framework f or building parser components and configurations that is extremely...

PT-2012-1196 · Apache +1 · Apache Xerces2 Java Parser +1

Name of the Vulnerable Software and Affected Versions: Apache Xerces2 Java Parser versions prior to 2.12.0 Description: The issue is related to resource management errors in the XML file analyzer. It can be exploited by a remote attacker using a specially crafted XML message, leading to a denial ...

Mandriva Security Advisory MDVSA-2009:223-1 (xerces-c)

The remote host is missing an update to xerces-c announced via advisory MDVSA-2009:223-1. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR...

Mandriva Security Advisory MDVSA-2009:223-1 (xerces-c)

The remote host is missing an update to xerces-c announced via advisory MDVSA-2009:223-1. OpenVAS Vulnerability Test $Id: mdksa20092231.nasl 6573 2017-07-06 13:10:50Z cfischer $ Description: Auto-generated from advisory MDVSA-2009:223-1 xerces-c Authors: Thomas Reinke Copyright: Copyright c 2009...

Apache Xerces C++ library

Crash on XML parsing...

Mandriva Linux Security Advisory : xerces-c (MDVSA-2009:223-1)

A vulnerability has been found and corrected in xerces-c : Stack consumption vulnerability in validators/DTD/DTDScanner.cpp in Apache Xerces C++ 2.7.0 and 2.8.0 allows context-dependent attackers to cause a denial of service application crash via vectors involving nested parentheses and invalid...