Vulnerability in Apache Xerces2_java
CVE-2009-2625
XMLScanner.java in Apache Xerces2 Java, as used in Sun Java Runtime Environment (JRE) in JDK and JRE 6 before Update 15 and JDK and JRE 5.0 before Update 20, and in other products, allows remote attackers to cause a denial of service (infi…
EPSS: 0.304 (98.0th percentile) — read the EPSS interpretation.
Affected products
- Apache Xerces2_java — versions 2.9.1
- Oracle Jdk — versions 1.5.0, 1.6.0
- Oracle Primavera_p6_enterprise_project_portfolio_management — versions 6.1, 6.2.1, 7.0
- Oracle Primavera_web_services — versions 6.2.1, 7.0
- Canonical Ubuntu_linux — versions 6.06, 8.04, 8.10
- Debian Debian_linux — versions 4.0, 5.0
- Fedoraproject Fedora — versions 10, 11
- Opensuse — versions 11.0, 11.1, 11.2
- Suse Linux_enterprise_server — versions 9, 10, 11
- N/a — versions n/a
References
- cret@cert.org (vendor-advisory, Third Party Advisory, x_refsource_SLACKWARE)
- cret@cert.org (x_refsource_REDHAT, vendor-advisory, Broken Link)
- cret@cert.org (x_refsource_REDHAT, vendor-advisory, Broken Link)
- cret@cert.org (Third Party Advisory, x_refsource_MISC)
- cret@cert.org (x_refsource_UBUNTU, vendor-advisory, Third Party Advisory)
- cret@cert.org (x_refsource_SECUNIA, Third Party Advisory, third-party-advisory)
- cret@cert.org (Permissions Required, vdb-entry, x_refsource_VUPEN)
- cret@cert.org (vendor-advisory, Third Party Advisory, x_refsource_DEBIAN)
- cret@cert.org (mailing-list, x_refsource_MLIST, Patch, Mailing List, Third Party Advisory)
- cret@cert.org (vendor-advisory, x_refsource_SUNALERT, Broken Link)