NVD

Id
49150  
Name
CVE-2009-1885  
Description
Stack consumption vulnerability in validators/DTD/DTDScanner.cpp in Apache Xerces C++ 2.7.0 and 2.8.0 allows context-dependent attackers to cause a denial of service (application crash) via vectors involving nested parentheses and invalid byte values in "simply nested DTD structures," as demonstrated by the Codenomicon XML fuzzing framework.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:N/A:P)  
Pub Date
2017-01-07  
Published
2009-08-11  
Modified Date
2009-09-02  
Seq
2009-1885  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
248736 49150 CVE-2009-1885 http://svn.apache.org/viewvc/xerces/c/trunk/src/xercesc/validators/DTD/DTDScanner.cpp?r1=781488&r2=781487&pathrev=781488&view=patch  View
248737 49150 CVE-2009-1885 http://svn.apache.org/viewvc?view=rev&revision=781488  View
248738 49150 CVE-2009-1885 http://www.cert.fi/en/reports/2009/vulnerability2009085.html  View
248739 49150 CVE-2009-1885 http://www.codenomicon.com/labs/xml/  View
248740 49150 CVE-2009-1885 MDVSA-2009:223  View
248741 49150 CVE-2009-1885 http://www.networkworld.com/columnists/2009/080509-xml-flaw.html  View
248742 49150 CVE-2009-1885 35986  View
248743 49150 CVE-2009-1885 ADV-2009-2196  View
248744 49150 CVE-2009-1885 xerces-c-dtd-dos(52321)  View
248745 49150 CVE-2009-1885 https://bugzilla.redhat.com/show_bug.cgi?id=515515  View
248746 49150 CVE-2009-1885 FEDORA-2009-8305  View
248747 49150 CVE-2009-1885 FEDORA-2009-8350  View
248748 49150 CVE-2009-1885 FEDORA-2009-8345  View
248749 49150 CVE-2009-1885 FEDORA-2009-8332  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
40983 JVNDB-2009-001989 Apache Xerces C++ におけるサービス運用妨害 (DoS) の脆弱性 Apache Xerces C++ の validators/DTD/DTDScanner.cpp には、ネストされたカッコおよび不正なバイト値の処理に不備があるため、サービス運用妨害 (DoS) 状態となる脆弱性が存在します。 CVE-2009-1885 39316 CVE-2009-1885 49150 4.3 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-001989.html 2009-08-06 2010-05-06 View