CVE

Id
88918  
CVE No.
CVE-2016-2099  
Status
Candidate  
Description
Use-after-free vulnerability in validators/DTD/DTDScanner.cpp in Apache Xerces C++ 3.1.3 and earlier allows context-dependent attackers to have unspecified impact via an invalid character in an XML document.  
Phase
Assigned (20160129)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
772660 88918 CVE-2016-2099 MLIST:[oss-security] 20160509 CVE-2016-2099: use-after-free in Xerces 3.1.3  View
772661 88918 CVE-2016-2099 URL:http://www.openwall.com/lists/oss-security/2016/05/09/7  View
772662 88918 CVE-2016-2099 CONFIRM:https://issues.apache.org/jira/browse/XERCESC-2066  View
772663 88918 CVE-2016-2099 DEBIAN:DSA-3579  View
772664 88918 CVE-2016-2099 URL:http://www.debian.org/security/2016/dsa-3579  View
772665 88918 CVE-2016-2099 SUSE:openSUSE-SU-2016:1744  View
772666 88918 CVE-2016-2099 URL:http://lists.opensuse.org/opensuse-updates/2016-07/msg00016.html  View
772667 88918 CVE-2016-2099 SUSE:openSUSE-SU-2016:2232  View
772668 88918 CVE-2016-2099 URL:http://lists.opensuse.org/opensuse-updates/2016-09/msg00013.html  View
772669 88918 CVE-2016-2099 SUSE:openSUSE-SU-2016:1808  View
772670 88918 CVE-2016-2099 URL:http://lists.opensuse.org/opensuse-updates/2016-07/msg00053.html  View
772671 88918 CVE-2016-2099 BID:90502  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
1536 JVNDB-2016-002309 Android の System_server で使用される Skia の include/core/SkPostConfig.h における権限を取得される脆弱性 Android の System_server で使用される Skia の include/core/SkPostConfig.h は、特定のクラッシュを誤って処理するため、権限を取得される脆弱性が存在します。 CVE-2016-2412 88918 9.3 7.8 http://jvndb.jvn.jp/ja/contents/2016/JVNDB-2016-002309.html  View