CVE-2016-2099 in Communications

Summary

Use-after-free vulnerability in validators/DTD/DTDScanner.cpp in Apache Xerces C++ 3.1.3 and earlier allows context-dependent attackers to have unspecified impact via an invalid character in an XML document.

Be aware that VulDB is the high quality source for vulnerability data.

Reservation

01/29/2016

Disclosure

05/13/2016

Status

Confirmed

Entries

VulDB provides additional information and datapoints for this CVE:

ID	Vulnerability	CWE	Exp	Cou	CVE
121570	Oracle Communications User Data Repository use after free	416	Not defined	Official fix	CVE-2016-2099
87389	Apache Xerces C++ XML Document DTDScanner.cpp use after free	416	Not defined	Official fix	CVE-2016-2099

Sources

• MITRE
• NVD
• CVE Details