Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2016-2099

Опубликовано: 13 мая 2016
Источник: nvd
CVSS3: 9.8
CVSS2: 10
EPSS Низкий

Описание

Use-after-free vulnerability in validators/DTD/DTDScanner.cpp in Apache Xerces C++ 3.1.3 and earlier allows context-dependent attackers to have unspecified impact via an invalid character in an XML document.

Комментарий

CWE-416: Use After Free

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:apache:xerces-c\+\+:*:*:*:*:*:*:*:*
Версия до 3.1.3 (включая)
Конфигурация 2
cpe:2.3:o:opensuse:opensuse:13.2:*:*:*:*:*:*:*

EPSS

Процентиль: 81%
0.01611
Низкий

9.8 Critical

CVSS3

10 Critical

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

CVSS3: 9.8
ubuntu
больше 9 лет назад

Use-after-free vulnerability in validators/DTD/DTDScanner.cpp in Apache Xerces C++ 3.1.3 and earlier allows context-dependent attackers to have unspecified impact via an invalid character in an XML document.

redhat
больше 9 лет назад

Use-after-free vulnerability in validators/DTD/DTDScanner.cpp in Apache Xerces C++ 3.1.3 and earlier allows context-dependent attackers to have unspecified impact via an invalid character in an XML document.

CVSS3: 9.8
debian
больше 9 лет назад

Use-after-free vulnerability in validators/DTD/DTDScanner.cpp in Apach ...

CVSS3: 9.8
github
больше 3 лет назад

Use-after-free vulnerability in validators/DTD/DTDScanner.cpp in Apache Xerces C++ 3.1.3 and earlier allows context-dependent attackers to have unspecified impact via an invalid character in an XML document.

suse-cvrf
больше 9 лет назад

Security update for xerces-c

EPSS

Процентиль: 81%
0.01611
Низкий

9.8 Critical

CVSS3

10 Critical

CVSS2

Дефекты

NVD-CWE-Other