Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

debian логотип

CVE-2016-2099

Опубликовано: 13 мая 2016
Источник: debian
EPSS Низкий

Описание

Use-after-free vulnerability in validators/DTD/DTDScanner.cpp in Apache Xerces C++ 3.1.3 and earlier allows context-dependent attackers to have unspecified impact via an invalid character in an XML document.

Пакеты

ПакетСтатусВерсия исправленияРелизТип
xerces-cfixed3.1.3+debian-2package

Примечания

  • https://issues.apache.org/jira/browse/XERCESC-2066

EPSS

Процентиль: 93%
0.06781
Низкий

Связанные уязвимости

CVSS3: 9.8
ubuntu
больше 10 лет назад

Use-after-free vulnerability in validators/DTD/DTDScanner.cpp in Apache Xerces C++ 3.1.3 and earlier allows context-dependent attackers to have unspecified impact via an invalid character in an XML document.

redhat
больше 10 лет назад

Use-after-free vulnerability in validators/DTD/DTDScanner.cpp in Apache Xerces C++ 3.1.3 and earlier allows context-dependent attackers to have unspecified impact via an invalid character in an XML document.

CVSS3: 9.8
nvd
больше 10 лет назад

Use-after-free vulnerability in validators/DTD/DTDScanner.cpp in Apache Xerces C++ 3.1.3 and earlier allows context-dependent attackers to have unspecified impact via an invalid character in an XML document.

CVSS3: 9.8
github
больше 4 лет назад

Use-after-free vulnerability in validators/DTD/DTDScanner.cpp in Apache Xerces C++ 3.1.3 and earlier allows context-dependent attackers to have unspecified impact via an invalid character in an XML document.

suse-cvrf
почти 10 лет назад

Security update for xerces-c

EPSS

Процентиль: 93%
0.06781
Низкий