Início
Início
Tendências
Tendências
Vulnerabilidades
Vulnerabilidades
Notícias
Notícias
Pesquisadores
Pesquisadores
Por que dbugs?
Por que dbugs?
Configurações

Rauli Kaksonen

Pesquisador deCodenomicon Ltd
#58551de 60,450
4.3CVSS total
Vulnerabilidades · 1
PT-2009-4349
2009-08-11
4.3
CVE-2009-1885
Apache
Apache Xerces-C
Name of the Vulnerable Software and Affected Versions: Apache Xerces C++ versions 2.7.0 through 2.8.0 Description: A stack consumption issue allows context-dependent attackers to cause a denial of service, resulting in an application crash. This can be achieved through vectors involving nested parentheses and invalid byte values in simply nested DTD structures. Recommendations: For Apache Xerces C++ versions 2.7.0 through 2.8.0, consider updating to a newer version to mitigate the risk of a denial of service attack. At the moment, there is no information about a newer version that contains a fix for this vulnerability.