CVE-2016-4463

CVE-2016-4463 affects the Xerces-C++ XML parser. A stack-based overflow occurs when processing deeply nested DTDs, allowing a context-dependent attacker to cause a denial of service. The vulnerability applies to Xerces-C++ versions before 3.1.4; the recommended remediation is upgrading to 3.1.4 o...

CVE-2016-2099

The CVE-2016-2099 entry affects Apache Xerces-C++ up to version 3.1.3, with a use-after-free in validators/DTD/DTDScanner.cpp that can be triggered by an invalid character in an XML document. The issue enables context-dependent attackers to cause unspecified impact. Public advisories and vendor u...