CVE-2016-0729
CriticalSummary
Multiple buffer overflows in the XML Parser library in Apache Xerces-C before version 3.1.3 allow remote attackers to cause a denial of service (segmentation fault or memory corruption) or possibly execute arbitrary code via a crafted document.
Risk Assessment
Attackers may exploit this vulnerability to disrupt system operations or gain unauthorized access to the system by executing malicious code.
Recommendation
It is recommended to update the Apache Xerces-C library to version 3.1.3 or later to mitigate this vulnerability.
Original NVD description (English source)
Multiple buffer overflows in (1) internal/XMLReader.cpp, (2) util/XMLURL.cpp, and (3) util/XMLUri.cpp in the XML Parser library in Apache Xerces-C before 3.1.3 allow remote attackers to cause a denial of service (segmentation fault or memory corruption) or possibly execute arbitrary code via a crafted document.