CVE-2009-1885

Stack consumption vulnerability in validators/DTD/DTDScanner.cpp in Apache Xerces C++ 2.7.0 and 2.8.0 allows context-dependent attackers to cause a denial of…

published August 11, 2009

CVSS
—
EPSS
5%
Percentile
92.6
In the wild
Unconfirmed
What it is

Stack consumption vulnerability in validators/DTD/DTDScanner.cpp in Apache Xerces C++ 2.7.0 and 2.8.0 allows context-dependent attackers to cause a denial of service (application crash) via vectors involving nested parentheses and invalid byte values in "simply nested DTD structures," as demonstrated by the Codenomicon XML fuzzing framework.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.05324 · 92.6th percentile
Published
2009-08-11T18:00Z
EPSS history
Timeline
  • 11 AUG 18:00Z
    Stack consumption vulnerability in validators/DTD/DTDScanner.cpp in Apache Xerces C++ 2.7.0 and 2.8.0 allows context-dependent attackers to cause a denial of…
    cvelistv5