Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
XMLScanner.java in Apache Xerces2 Java, as used in Sun Java Runtime Environment (JRE) in JDK and JRE 6 before Update 15 and JDK and JRE 5.0 before Update 20, and in other products, allows remote attackers to cause a denial of service (infinite loop and application hang) via malformed XML input, as demonstrated by the Codenomicon XML fuzzing framework.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Apache Xerces 安全漏洞
Vulnerability Description
Xerces是一个由Apache组织所推动的一项XML文档解析开源项目。 Apache Xerces2 Java（使用在Sun Java Runtime Environment (JRE)）中的XMLScanner.java文件存在安全漏洞。该漏洞源于网络系统或产品缺乏有效的权限许可和访问控制措施。以下产品及版本受到影响：JDK 6 Update 15之前版本；JRE 6 Update 15之前版本；JDK 5.0 Update 20之前版本；JRE 5.0 Update 20之前版本。
CVSS Information
N/A
Vulnerability Type
N/A