Description
The XML parser in Xerces-C++ 2.5.0 allows remote attackers to cause a denial of service (CPU consumption) via XML attributes in a crafted XML document.
References
- 20041002 Security advisory - Xerces-C++ 2.5.0: Attribute blowup mailing-list
- 12715 third-party-advisory
- xercescplusplus-xml-parser-dos(17575) vdb-entry
- 11312 vdb-entry