Description
Davenport before 0.9.10 allows attackers to cause a denial of service (resource consumption) via (1) a very large XML file or (2) entity expansion attacks.
References
- 9105 vdb-entry
- 11001 vdb-entry
- http://sourceforge.net/project/shownotes.php?release_id=262497
- 1011030 vdb-entry
- 12337 third-party-advisory
- http://sourceforge.net/mailarchive/forum.php?thread_id=5385243&forum_id=33977
- davenport-long-xml-dos(17062) vdb-entry