CVE-2019-1187

XmlLite Runtime Denial of Service Vulnerability

Medium · published August 14, 2019

CVSS v3.1
5.5
EPSS
3%
Percentile
87.7
In the wild
Unconfirmed
What it is

A denial of service vulnerability exists when the XmlLite runtime (XmlLite.dll) improperly parses XML input. An attacker who successfully exploited this vulnerability could cause a denial of service against an XML application.

A remote unauthenticated attacker could exploit this vulnerability by issuing specially crafted requests to an XML application.

The update addresses the vulnerability by correcting how the XmlLite runtime parses XML input.

The record
Technical detail
CVSS v3.1
5.5 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C
CVSS v4.0
Not supplied
EPSS
0.03102 · 87.7th percentile
Published
2019-08-14T20:55Z
EPSS history
Timeline
  • 14 AUG 20:55Z
    XmlLite Runtime Denial of Service Vulnerability
    cvelistv5