CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2013-2210

Heap-based buffer overflow in the XML Signature Reference functionality in Apache Santuario XML Security for C++ (aka xml-security-c) before 1.7.2 allows context-dependent attackers to cause a denial of service (crash) and possibly execute arbitrary code via malformed XPointer expressions. NOTE: this is due to an incorrect fix for CVE-2013-2154.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.016

EPSS Ranking 80.7%

CVSS Severity

CVSS v2 Score 7.5

References

Products affected by CVE-2013-2210

Apache » Xml Security For C++ » Version: 0.1.0

cpe:2.3:a:apache:xml_security_for_c++:0.1.0
Apache » Xml Security For C++ » Version: 0.2.0

cpe:2.3:a:apache:xml_security_for_c++:0.2.0
Apache » Xml Security For C++ » Version: 1.1.0

cpe:2.3:a:apache:xml_security_for_c++:1.1.0
Apache » Xml Security For C++ » Version: 1.2.0

cpe:2.3:a:apache:xml_security_for_c++:1.2.0
Apache » Xml Security For C++ » Version: 1.2.1

cpe:2.3:a:apache:xml_security_for_c++:1.2.1
Apache » Xml Security For C++ » Version: 1.3.0

cpe:2.3:a:apache:xml_security_for_c++:1.3.0
Apache » Xml Security For C++ » Version: 1.3.1

cpe:2.3:a:apache:xml_security_for_c++:1.3.1
Apache » Xml Security For C++ » Version: 1.4.0

cpe:2.3:a:apache:xml_security_for_c++:1.4.0
Apache » Xml Security For C++ » Version: 1.5.0

cpe:2.3:a:apache:xml_security_for_c++:1.5.0
Apache » Xml Security For C++ » Version: 1.5.1

cpe:2.3:a:apache:xml_security_for_c++:1.5.1
Apache » Xml Security For C++ » Version: 1.6.0

cpe:2.3:a:apache:xml_security_for_c++:1.6.0
Apache » Xml Security For C++ » Version: 1.6.1

cpe:2.3:a:apache:xml_security_for_c++:1.6.1
Apache » Xml Security For C++ » Version: 1.7.0

cpe:2.3:a:apache:xml_security_for_c++:1.7.0
Apache » Xml Security For C++ » Version: 1.7.1

cpe:2.3:a:apache:xml_security_for_c++:1.7.1

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2013-2210

Products

Pricing

Contact Us