CVE-2008-4482

The XML parser in Xerces-C++ before 3.0.0 allows context-dependent attackers to cause a denial of service (stack consumption and crash) via an XML schema…

published October 8, 2008

CVSS
—
EPSS
4%
Percentile
90.8
In the wild
Unconfirmed
What it is

The XML parser in Xerces-C++ before 3.0.0 allows context-dependent attackers to cause a denial of service (stack consumption and crash) via an XML schema definition with a large maxOccurs value, which triggers excessive memory consumption during validation of an XML file.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.04183 · 90.8th percentile
Published
2008-10-08T01:00Z
EPSS history
Timeline
  • 08 OCT 01:00Z
    The XML parser in Xerces-C++ before 3.0.0 allows context-dependent attackers to cause a denial of service (stack consumption and crash) via an XML schema…
    cvelistv5