Tracker / CVE-2016-2099
CVE-2016-2099
Critical 9.8
Use-after-free vulnerability in validators/DTD/DTDScanner.cpp in Apache Xerces C++ 3.1.3 and earlier allows context-dependent attackers to have unspecified impact via an invalid character in an XML document.
Affected products and versions
| apache | xerces-c\+\+ · … → 3.1.3 |
|---|---|
| opensuse | opensuse |
Analysis
This page is not indexable yet.Until it carries original analysis — what it actually exposes, how to check in two minutes whether a system was touched, what to do if it was — the page stays noindex. The database decides that, not the template.