GCVE-110-MAGEIA-2016-253

Advisory Published

Vulnetix · Advisory published July 14, 2016

Apache PDFBox before 1.8.12 does not properly initialize the XML parsers, which allows context-dependent attackers to conduct XML External Entity (XXE) attacks via a crafted PDF (CVE-2016-2175).

Download JSON Open in Console

Affected Products

Vendor	Product	Versions	Platforms
Mageia	pdfbox	0 (affected), 1.8.7-1.1.mga5 (unaffected)	—

Aliases

CVE-2016-2175

References

Updated pdfbox packages fix security vulnerability

advisory

Updated pdfbox packages fix security vulnerability

issue

Updated pdfbox packages fix security vulnerability

issue

Updated pdfbox packages fix security vulnerability

advisory

Browse GCVE Records

71,925 records in the GCVE database · Updated July 13, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

Open in Console Download JSON