CVE-2013-2155

Name of the Vulnerable Software and Affected Versions Apache Santuario XML Security for C++ versions prior to 1.7.1

Description The issue allows remote attackers to cause a denial of service or bypass a protection mechanism and spoof a signature via crafted length values to certain functions, including compareBase64StringToRaw, DSIGAlgorithmHandlerDefault, and DSIGAlgorithmHandlerDefault::verify.

Recommendations For versions prior to 1.7.1, update to version 1.7.1 or later to resolve the issue.