xerces-c27: stack consumption vulnerability
| Package(s): | xerces-c27 |
CVE #(s): | CVE-2009-1885
|
| Created: | August 25, 2009 |
Updated: | December 4, 2009 |
| Description: |
From the CVE entry: Stack consumption vulnerability in validators/DTD/DTDScanner.cpp in Apache Xerces C++ 2.7.0 and 2.8.0 allows context-dependent attackers to cause a denial of service (application crash) via vectors involving nested parentheses and invalid byte values in "simply nested DTD structures," as demonstrated by the Codenomicon XML fuzzing framework. |
| Alerts: |
| Mandriva |
MDVSA-2009:223-1 |
xerces-c |
2009-12-04 |
| SuSE |
SUSE-SR:2009:014 |
dnsmasq, icu, libcurl3/libcurl2/curl/compat-curl2, Xerces-c/xerces-j2, tiff/libtiff, acroread_ja, xpdf, xemacs, mysql, squirrelmail, OpenEXR, wireshark |
2009-09-01 |
| Mandriva |
MDVSA-2009:223 |
xerces-c |
2009-08-30 |
| Fedora |
FEDORA-2009-8345 |
xerces-c |
2009-08-07 |
| Fedora |
FEDORA-2009-8350 |
xerces-c |
2009-08-07 |
| Fedora |
FEDORA-2009-8332 |
xerces-c27 |
2009-08-07 |
| Fedora |
FEDORA-2009-8305 |
xerces-c27 |
2009-08-07 |
|
