Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2021-101544
HistoryOct 12, 2021 - 12:00 a.m.

TinyXML infinite loop vulnerability

2021-10-1200:00:00
China National Vulnerability Database
www.cnvd.org.cn
17
tinyxml
infinite loop
vulnerability
denial of service
xml messages

EPSS

0.002

Percentile

59.1%

TinyXML is a C XML parser that can be easily integrated into other programs. An infinite loop vulnerability exists in TiXmlParsingData::Stamp in tinyxmlparser.cpp in TinyXML 2.6.2 and earlier versions. An attacker could exploit this vulnerability to cause a denial of service via specially crafted XML messages.