CVE-2017-12627

概要

参考情報

• seclists.org/oss-sec/2018/q1/203 · Mailing List
• securityfocus.com/bid/103219 · Third Party Advisory
• xerces.apache.org/xerces-c/secadv/CVE-2017-12627.txt · Vendor Advisory
• kc.mcafee.com/corporate/index
• lists.debian.org/debian-lts-announce/2018/03/msg00032.html

xerces-c++ のその他の脆弱性

• CVE-2024-23807緊急 9.8The Apache Xerces C++ XML parser on versions 3.0.0 before 3.2.5 contains a use-after-free error triggered during the scanning of external DT…
• CVE-2023-37536高 8.8An integer overflow in xerces-c++ 3.2.3 in BigFix Platform allows remote attackers to cause out-of-bound access via HTTP request.
• CVE-2018-1311高 8.1The Apache Xerces-C 3.0.0 to 3.2.3 XML parser contains a use-after-free error triggered during the scanning of external DTDs. This flaw has …
• CVE-2016-4463高 7.5Stack-based buffer overflow in Apache Xerces-C++ before 3.1.4 allows context-dependent attackers to cause a denial of service via a deeply n…
• CVE-2016-2099緊急 9.8Use-after-free vulnerability in validators/DTD/DTDScanner.cpp in Apache Xerces C++ 3.1.3 and earlier allows context-dependent attackers to h…