CVE-2016-4570

Name of the Vulnerable Software and Affected Versions mxml versions 2.7 through 2.9

Description The issue allows remote attackers to cause a denial of service, specifically stack consumption, by using a crafted XML file. This is related to the mxmlDelete function in mxml-node.c.

Recommendations For versions 2.7 through 2.9, consider avoiding the use of the mxmlDelete function until a patch is available. As a temporary workaround, restrict the processing of external XML files to minimize the risk of exploitation.