Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The XML parser in Xerces-C++ before 3.0.0 allows context-dependent attackers to cause a denial of service (stack consumption and crash) via an XML schema definition with a large maxOccurs value, which triggers excessive memory consumption during validation of an XML file.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Xerces-C++ 'maxOccurs' XML 解析远程拒绝服务漏洞
Vulnerability Description
Xerces-C++的XML解析器允许见机行事的攻击者通过具有一个大maxOccurs值的XML图表定义来引起拒绝服务(栈损耗和崩溃)，它能够在验证一个XML文件时触发多余的内存损耗。
CVSS Information
N/A
Vulnerability Type
N/A