CVE-2009-1885

Name	CVE-2009-1885
Description	Stack consumption vulnerability in validators/DTD/DTDScanner.cpp in Apache Xerces C++ 2.7.0 and 2.8.0 allows context-dependent attackers to cause a denial of service (application crash) via vectors involving nested parentheses and invalid byte values in "simply nested DTD structures," as demonstrated by the Codenomicon XML fuzzing framework.
Source	CVE (at NVD; CERT, LWN, oss-sec, fulldisc, Debian ELTS, Red Hat, Ubuntu, Gentoo, SUSE bugzilla/CVE, GitHub advisories/code/issues, web search, more)
Debian Bugs	540297, 541986

Vulnerable and fixed packages

The table below lists information on source packages.

Source Package	Release	Version	Status
xerces-c (PTS)	bullseye	3.2.3+debian-3+deb11u1	fixed
	bookworm	3.2.4+debian-1	fixed
	forky, sid, trixie	3.2.4+debian-1.3	fixed

The information below is based on the following data on fixed versions.

Package	Type	Release	Fixed Version	Urgency	Debian Bugs
xerces-c	source	(unstable)	3.0.1-2	low	540297
xerces-c2	source	lenny	2.8.0-3+lenny1
xerces-c2	source	(unstable)	2.8.0+deb1-2	low	541986
xerces27	source	(unstable)	(unfixed)

[etch] - xerces-c <no-dsa> (Minor issue)
[lenny] - xerces-c <no-dsa> (Minor issue)
[etch] - xerces27 <no-dsa> (Minor issue)