CVE-2004-1575 The XML parser in Xerces-C++ 2.5.0 allows remote attackers to cause a denial of service (CPU consumption) via XML attributes in a crafted XML document.
MediumCVSS 5.0
EPSS 6.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The XML parser in Xerces-C++ 2.5.0 allows remote attackers to cause a denial of service (CPU consumption) via XML attributes in a crafted XML document.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| apache xerces-c++ | = 2.5.0 | No fix listed |
References
- 20041002 Security advisory - Xerces-C++ 2.5.0: Attribute blowup mailing-list
- 12715 patch third-party-advisory
- 11312 patch vdb-entry
- xercescplusplus-xml-parser-dos(17575) vdb-entry