CVE-2009-1885

概要

参考情報

• secunia.com/advisories/36201 · Vendor Advisory
• svn.apache.org/viewvc/xerces/c/trunk/src/xercesc/validators/DTD/DTDScanner.cpp
• svn.apache.org/viewvc · Exploit
• cert.fi/en/reports/2009/vulnerability2009085.html
• codenomicon.com/labs/xml
• mandriva.com/security/advisories
• networkworld.com/columnists/2009/080509-xml-flaw.html
• securityfocus.com/bid/35986
• vupen.com/english/advisories/2009/2196 · Patch
• bugzilla.redhat.com/show_bug.cgi · Patch
• exchange.xforce.ibmcloud.com/vulnerabilities/52321
• redhat.com/archives/fedora-package-announce/2009-August/msg01001.html

xerces-c++ のその他の脆弱性

• CVE-2024-23807緊急 9.8The Apache Xerces C++ XML parser on versions 3.0.0 before 3.2.5 contains a use-after-free error triggered during the scanning of external DT…
• CVE-2023-37536高 8.8An integer overflow in xerces-c++ 3.2.3 in BigFix Platform allows remote attackers to cause out-of-bound access via HTTP request.
• CVE-2018-1311高 8.1The Apache Xerces-C 3.0.0 to 3.2.3 XML parser contains a use-after-free error triggered during the scanning of external DTDs. This flaw has …
• CVE-2017-12627緊急 9.8In Apache Xerces-C XML Parser library before 3.2.1, processing of external DTD paths can result in a null pointer dereference under certain …
• CVE-2016-4463高 7.5Stack-based buffer overflow in Apache Xerces-C++ before 3.1.4 allows context-dependent attackers to cause a denial of service via a deeply n…