CVE

Id
87025  
CVE No.
CVE-2016-0729  
Status
Candidate  
Description
Multiple buffer overflows in (1) internal/XMLReader.cpp, (2) util/XMLURL.cpp, and (3) util/XMLUri.cpp in the XML Parser library in Apache Xerces-C before 3.1.3 allow remote attackers to cause a denial of service (segmentation fault or memory corruption) or possibly execute arbitrary code via a crafted document.  
Phase
Assigned (20151216)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
761757 87025 CVE-2016-0729 BUGTRAQ:20160225 CVE-2016-0729: Apache Xerces-C XML Parser Crashes on Malformed Input  View
761758 87025 CVE-2016-0729 URL:http://www.securityfocus.com/archive/1/archive/1/537620/100/0/threaded  View
761759 87025 CVE-2016-0729 MISC:http://packetstormsecurity.com/files/135949/Apache-Xerces-C-XML-Parser-Buffer-Overflow.html  View
761760 87025 CVE-2016-0729 CONFIRM:http://svn.apache.org/viewvc?view=revision&revision=1727978  View
761761 87025 CVE-2016-0729 CONFIRM:http://xerces.apache.org/xerces-c/secadv/CVE-2016-0729.txt  View
761762 87025 CVE-2016-0729 CONFIRM:https://issues.apache.org/jira/browse/XERCESC-2061  View
761763 87025 CVE-2016-0729 CONFIRM:http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html  View
761764 87025 CVE-2016-0729 DEBIAN:DSA-3493  View
761765 87025 CVE-2016-0729 URL:http://www.debian.org/security/2016/dsa-3493  View
761766 87025 CVE-2016-0729 FEDORA:FEDORA-2016-880b91c090  View
761767 87025 CVE-2016-0729 URL:http://lists.fedoraproject.org/pipermail/package-announce/2016-April/182597.html  View
761768 87025 CVE-2016-0729 FEDORA:FEDORA-2016-9ff972ca42  View
761769 87025 CVE-2016-0729 URL:http://lists.fedoraproject.org/pipermail/package-announce/2016-April/182062.html  View
761770 87025 CVE-2016-0729 FEDORA:FEDORA-2016-ae9ac16cf3  View
761771 87025 CVE-2016-0729 URL:http://lists.fedoraproject.org/pipermail/package-announce/2016-April/182131.html  View
761772 87025 CVE-2016-0729 SUSE:openSUSE-SU-2016:1808  View
761773 87025 CVE-2016-0729 URL:http://lists.opensuse.org/opensuse-updates/2016-07/msg00053.html  View
761774 87025 CVE-2016-0729 SUSE:openSUSE-SU-2016:0966  View
761775 87025 CVE-2016-0729 URL:http://lists.opensuse.org/opensuse-updates/2016-04/msg00012.html  View
761776 87025 CVE-2016-0729 SUSE:openSUSE-SU-2016:1121  View
761777 87025 CVE-2016-0729 URL:http://lists.opensuse.org/opensuse-updates/2016-04/msg00086.html  View
761778 87025 CVE-2016-0729 BID:83423  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
1025 JVNDB-2016-001798 Android で使用される Linux Kernel の include/linux/poison.h におけるポイズンポインタ保護メカニズムを回避される脆弱性 Android で使用される Linux Kernel の include/linux/poison.h の LIST_POISON 関数は、mmap_min_addr 値との関係を適切に考慮しないため、ポイズンポインタ (poison-pointer) 保護メカニズムを回避される脆弱性が存在します。 CVE-2016-0821 87025 5 http://jvndb.jvn.jp/ja/contents/2016/JVNDB-2016-001798.html  View