DSA-1984-1

Details

Packages : libxerces2-java Vulnerability : denial of service Problem type : remote Debian-specific: no CVE Id : CVE-2009-2625 Debian Bug : 548358

It was discovered that libxerces2-java, a validating XML parser for Java, does not properly process malformed XML files. This vulnerability could allow an attacker to cause a denial of service while parsing a malformed XML file.

Affected Packages

libxerces2-java

Debian 4

Fixed in:

2.8.1-1+etch1

libxerces2-java

Debian 5

Fixed in:

2.9.1-2+lenny1

References

ADVISORY

https://security-tracker.debian.org/tracker/DSA-1984-1