Security Advisory

CVE-2016-2099

9.8
CRITICAL

Vulnerability Description

Use-after-free vulnerability in validators/DTD/DTDScanner.cpp in Apache Xerces C++ 3.1.3 and earlier allows context-dependent attackers to have unspecified impact via an invalid character in an XML document.
Published Date May 13, 2016
Official Source NIST NVD Advisory