CVE-2013-2210: Buffer Overflow
Heap-based buffer overflow in the XML Signature Reference functionality in Apache Santuario XML Security for C++ (aka xml-security-c) before 1.7.2 allows context-dependent attackers to cause a denial of service (crash) and possibly execute arbitrary code via malformed XPointer expressions. NOTE: this is due to an incorrect fix for CVE-2013-2154.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2013-2210?
CVE-2013-2210 is considered to have moderate severity due to its potential impact on denial of service and arbitrary code execution.
How do I fix CVE-2013-2210?
To fix CVE-2013-2210, upgrade to Apache Santuario XML Security for C++ version 1.7.2 or later.
What systems are affected by CVE-2013-2210?
CVE-2013-2210 affects Apache Santuario XML Security for C++ versions prior to 1.7.2.
Can CVE-2013-2210 lead to data breaches?
While CVE-2013-2210 primarily leads to denial of service, it may also create an opportunity for attackers to execute arbitrary code, potentially leading to data breaches.
What exploit methods are associated with CVE-2013-2210?
CVE-2013-2210 can be exploited by attackers using malformed XPointer expressions.