[XERCESC-2061] Buffer overruns in prolog parsing and error handling

• Type: Bug
• Status: Closed
• Priority: Blocker
• Resolution: Fixed
• Affects Version/s: 3.0.0, 3.0.1, 3.1.0, 3.1.1, 3.1.2
• Fix Version/s: 3.2.0, 3.1.3
• Component/s: Non-Validating Parser, Validating Parser (DTD), Validating Parser (XML Schema)
• Assignee: Scott Cantor
• Reporter: Scott Cantor
• Created: 25/Feb/16 14:46
• Updated: 28/Aug/17 23:41
• Resolved: 22/Jun/17 18:16

Description

Vulnerabilities were reported to the project that led to the discovery of several buffer overflows.

The issue was publically disclosed as CVE-2016-0729