CNVD-2016-03006 | Vulnetix

CNVD-2016-03006 PUBLISHED

Record from circl · Published May 12, 2016

Xerces是美国阿帕奇（Apache）软件基金会的一个开源的XML文档解析项目，也是一个开源的XML语法解析器，它目前有多种语言版本包括JAVA、C++、PERL、COM等。 Xerces 3.1.3版本的DTDScanner中存在内存错误引用漏洞，该漏洞源于程序未能正确处理异常。攻击者可利用该漏洞访问已释放的对象。

Timeline

May 10, 2016 CVE ID Reserved
May 10, 2016 CVE Updated
May 12, 2016 CVE Published

Query this with the API

The same record, from the CLI:

vulnetix vdb vuln CNVD-2016-03006
vulnetix vdb fixes CNVD-2016-03006

Or with curl, using the org id and key from your account page:

curl -s -H "Authorization: ApiKey ${VULNETIX_ORG_ID}:${VULNETIX_API_KEY}" \
  "https://api.vdb.vulnetix.com/v2/vuln/CNVD-2016-03006/fixes/registry"

The Community plan is free and allows 50 queries a day. Get a free API key · API quickstart

Look up in the Resolve Platform →