PT-2013-3567 · Apache · Apache Santuario Xml Security For C++
James Forshaw
·
Publicado
2013-07-01
·
Atualizado
2021-09-17
·
CVE-2013-2156
CVSS v2.0
7.5
Alta
| Vetor | AV:N/AC:L/Au:N/C:P/I:P/A:P |
Name of the Vulnerable Software and Affected Versions
Apache Santuario XML Security for C++ versions prior to 1.7.1
Description
The issue is related to a heap-based buffer overflow in the Exclusive Canonicalization functionality. This can be exploited by remote attackers using a crafted PrefixList attribute, potentially leading to a denial of service or arbitrary code execution.
Recommendations
For versions prior to 1.7.1, update to version 1.7.1 or later to resolve the issue. As a temporary workaround, consider restricting access to the Exclusive Canonicalization functionality until a patch is applied.
Correção
Buffer Overflow
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Apache Santuario Xml Security For C++