NVD

Id
17113  
Name
CVE-2016-0729  
Description
Multiple buffer overflows in (1) internal/XMLReader.cpp, (2) util/XMLURL.cpp, and (3) util/XMLUri.cpp in the XML Parser library in Apache Xerces-C before 3.1.3 allow remote attackers to cause a denial of service (segmentation fault or memory corruption) or possibly execute arbitrary code via a crafted document.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-19  
Published
2016-04-07  
Modified Date
2016-12-02  
Seq
2016-0729  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
94949 17113 CVE-2016-0729 FEDORA-2016-9ff972ca42  View
94950 17113 CVE-2016-0729 FEDORA-2016-ae9ac16cf3  View
94951 17113 CVE-2016-0729 FEDORA-2016-880b91c090  View
94952 17113 CVE-2016-0729 openSUSE-SU-2016:0966  View
94953 17113 CVE-2016-0729 openSUSE-SU-2016:1121  View
94954 17113 CVE-2016-0729 openSUSE-SU-2016:1808  View
94955 17113 CVE-2016-0729 http://packetstormsecurity.com/files/135949/Apache-Xerces-C-XML-Parser-Buffer-Overflow.html  View
94956 17113 CVE-2016-0729 http://svn.apache.org/viewvc?view=revision&revision=1727978  View
94957 17113 CVE-2016-0729 DSA-3493  View
94958 17113 CVE-2016-0729 http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html  View
94959 17113 CVE-2016-0729 20160225 CVE-2016-0729: Apache Xerces-C XML Parser Crashes on Malformed Input  View
94960 17113 CVE-2016-0729 83423  View
94961 17113 CVE-2016-0729 http://xerces.apache.org/xerces-c/secadv/CVE-2016-0729.txt  View
94962 17113 CVE-2016-0729 https://issues.apache.org/jira/browse/XERCESC-2061  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
1219 JVNDB-2016-001992 Apache Xerces-C の XML パーサライブラリにおけるバッファオーバーフローの脆弱性 Apache Xerces-C の XML パーサライブラリの (1) internal/XMLReader.cpp、(2) util/XMLURL.cpp、または (3) util/XMLUri.cpp には、バッファオーバーフローの脆弱性が存在します。 CVE-2016-0729 86933 CVE-2016-0729 17113 7.5 9.8 http://jvndb.jvn.jp/ja/contents/2016/JVNDB-2016-001992.html 2016-02-25 2016-11-21 View