• info
• discussion
• exploit
• solution
• references

Xerces C++ Duplicated Attributes XML Parsing Denial Of Service Vulnerability

Solution:
The vendor has released version 2.6.0 of Xerces C++ to address this issue:


Apache Software Foundation Xerces C++ 2.5 .0

• Apache Software Foundation xerces-c-src_2_6_0.tar.gz
  http://www.apache.org/dist/xml/xerces-c/xerces-c-src_2_6_0.tar.gz