CVE-2023-37536

Name of the Vulnerable Software and Affected Versions xerces-c++ version 3.2.3

Description The issue is caused by an integer overflow in xerces-c++ that allows remote attackers to cause out-of-bound access via an HTTP request. This can potentially allow a remote attacker to execute arbitrary code by sending a specially crafted HTTP request.

Recommendations For xerces-c++ version 3.2.3, consider updating to a newer version that contains a fix for this issue, as the current version allows remote attackers to cause out-of-bound access via HTTP requests. At the moment, there is no information about a newer version that contains a fix for this vulnerability.