DEBIAN-CVE-2009-2625

Advisory lineage Upstream: 1 Downstream: 1
Upstream
CVE-2009-2625
Downstream
DSA-1984-1
Published: 06 Aug 2009, 15:30
Last modified:28 Apr 2026, 20:04

Vulnerability Summary

Overall Risk (default)
minimal
0/100
CVSS Score
No data
EPSS Score
No data
KEV
Not listed
Ransomware
No reports
Public exploits
None found
Dark Web
Not detected

Timeline

06 Aug 2009, 15:30
Published
Vulnerability first disclosed
28 Apr 2026, 20:04
Last Modified
Vulnerability information updated

Description

XMLScanner.java in Apache Xerces2 Java, as used in Sun Java Runtime Environment (JRE) in JDK and JRE 6 before Update 15 and JDK and JRE 5.0 before Update 20, and in other products, allows remote attackers to cause a denial of service (infinite loop and application hang) via malformed XML input, as demonstrated by the Codenomicon XML fuzzing framework.

Affected Systems

  • debian•libxerces2-java

    < 2.9.1-4.1 | < 2.9.1-4.1 | < 2.9.1-4.1 | < 2.9.1-4.1

References (1)