CVE-2012-0880
HighSummary
Apache Xerces-C++ allows remote attackers to cause a denial of service (CPU consumption) via a crafted message sent to an XML service that causes hash table collisions.
Risk Assessment
Attackers can exploit this vulnerability to overload the server, potentially leading to service unavailability for users.
Recommendation
It is recommended to update Apache Xerces-C++ to the latest version to mitigate the risks associated with this vulnerability.
Other vulnerabilities in Apache Xerces-C++
See all- CVE-2016-4463High
A stack-based buffer overflow in Apache Xerces-C++ before version 3.1.4 allows context-dependent attackers to cause a denial of service via a deeply nested DTD.
- CVE-2016-2099Critical
A use-after-free vulnerability in Apache Xerces C++ 3.1.3 and earlier allows context-dependent attackers to have unspecified impact via an invalid character in an XML document.
- CVE-2016-0729Critical
Multiple buffer overflows in the XML Parser library in Apache Xerces-C before version 3.1.3 allow remote attackers to cause a denial of service (segmentation fault or memory corruption) or possibly execute arbitrary code via a crafted document.
Original NVD description (English source)
Apache Xerces-C++ allows remote attackers to cause a denial of service (CPU consumption) via a crafted message sent to an XML service that causes hash table collisions.