CVE-2017-8315 Eclipse XML parser for the Eclipse IDE versions 2017.2.5 and earlier was found vulnerable to an XML External Entity attack. An attacker can exploit the vulnerability by implementing malicious code on....
HighCVSS 7.5
EPSS 1.6%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Eclipse XML parser for the Eclipse IDE versions 2017.2.5 and earlier was found vulnerable to an XML External Entity attack. An attacker can exploit the vulnerability by implementing malicious code on Androidmanifest.xml.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/apktool(Debian:12) | < 2.2.4-1 | 2.2.4-1 |
| debian/apktool(Debian:13) | < 2.2.4-1 | 2.2.4-1 |
| debian/apktool(Debian:14) | < 2.2.4-1 | 2.2.4-1 |
| eclipse ide | = 2017.2.5 | No fix listed |
| Check Point Software Technologies Ltd. Eclipse | = All version lower or equal to 2017.2.5 | No fix listed |
References
- Debian Security Tracker CVE-2017-8315 vendor-advisory
- bugs.eclipse.org permissions-required vendor-advisory
- research.checkpoint.com exploit technical-description third-party-advisory