CVE-2008-4482

概要

参考情報

• issues.apache.org/jira/browse/XERCESC-1051 · Exploit
• secunia.com/advisories/32108 · Vendor Advisory
• securityfocus.com/bid/31533 · Patch
• xerces.apache.org/xerces-c/releases.html
• exchange.xforce.ibmcloud.com/vulnerabilities/45596

xerces-c++ のその他の脆弱性

• CVE-2024-23807緊急 9.8The Apache Xerces C++ XML parser on versions 3.0.0 before 3.2.5 contains a use-after-free error triggered during the scanning of external DT…
• CVE-2023-37536高 8.8An integer overflow in xerces-c++ 3.2.3 in BigFix Platform allows remote attackers to cause out-of-bound access via HTTP request.
• CVE-2018-1311高 8.1The Apache Xerces-C 3.0.0 to 3.2.3 XML parser contains a use-after-free error triggered during the scanning of external DTDs. This flaw has …
• CVE-2017-12627緊急 9.8In Apache Xerces-C XML Parser library before 3.2.1, processing of external DTD paths can result in a null pointer dereference under certain …
• CVE-2016-4463高 7.5Stack-based buffer overflow in Apache Xerces-C++ before 3.1.4 allows context-dependent attackers to cause a denial of service via a deeply n…