CVE-2013-2156: Buffer Overflow
Heap-based buffer overflow in the Exclusive Canonicalization functionality (xsec/canon/XSECC14n20010315.cpp) in Apache Santuario XML Security for C++ (aka xml-security-c) before 1.7.1 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted PrefixList attribute.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2013-2156?
CVE-2013-2156 is classified as a moderate severity vulnerability due to its potential to cause denial of service and possibly execute arbitrary code.
How do I fix CVE-2013-2156?
To fix CVE-2013-2156, upgrade to Apache XML Security for C++ version 1.7.1 or later.
What type of vulnerability is CVE-2013-2156?
CVE-2013-2156 is a heap-based buffer overflow vulnerability in the Exclusive Canonicalization functionality.
Which versions of Apache XML Security for C++ are affected by CVE-2013-2156?
CVE-2013-2156 affects Apache XML Security for C++ versions prior to 1.7.1.
Can CVE-2013-2156 be exploited remotely?
Yes, CVE-2013-2156 can be exploited remotely by an attacker through crafted input.