CVE-2016-4463
HighSummary
A stack-based buffer overflow in Apache Xerces-C++ before version 3.1.4 allows context-dependent attackers to cause a denial of service via a deeply nested DTD.
Risk Assessment
Attackers can exploit this vulnerability to disrupt application functionality, potentially leading to service outages.
Recommendation
It is recommended to upgrade Apache Xerces-C++ to version 3.1.4 or later to mitigate this vulnerability.
Other vulnerabilities in Apache Xerces-C++
See all- CVE-2012-0880High
Apache Xerces-C++ allows remote attackers to cause a denial of service (CPU consumption) via a crafted message sent to an XML service that causes hash table collisions.
- CVE-2016-2099Critical
A use-after-free vulnerability in Apache Xerces C++ 3.1.3 and earlier allows context-dependent attackers to have unspecified impact via an invalid character in an XML document.
- CVE-2016-0729Critical
Multiple buffer overflows in the XML Parser library in Apache Xerces-C before version 3.1.3 allow remote attackers to cause a denial of service (segmentation fault or memory corruption) or possibly execute arbitrary code via a crafted document.
Original NVD description (English source)
Stack-based buffer overflow in Apache Xerces-C++ before 3.1.4 allows context-dependent attackers to cause a denial of service via a deeply nested DTD.