CVE 2009-2625
XMLScanner.java in Apache Xerces2 Java, as used in Sun Java Runtime Environment (JRE) in JDK and JRE 6 before Update 15 and JDK and JRE 5.0 before Update 20, and in other products, allows remote attackers to cause a denial of service (infinite loop and application hang) via malformed XML input, as demonstrated by the Codenomicon XML fuzzing framework.
Related bugs and status
CVE-2009-2625 (Candidate) is related to these bugs:
Bug #85969: Java Docs Package Won't Install
| Summary | In | Importance | Status | |||
|---|---|---|---|---|---|---|
| 85969 | Java Docs Package Won't Install | sun-java6 (Ubuntu) | Medium | Fix Released | ||
| 85969 | Java Docs Package Won't Install | sun-java5 (Ubuntu) | Medium | Invalid | ||
| 85969 | Java Docs Package Won't Install | j2se1.4-i586 (Ubuntu) | Wishlist | Invalid | ||
Bug #409559: version 1.6.0_15 is available
| Summary | In | Importance | Status | |||
|---|---|---|---|---|---|---|
| 409559 | version 1.6.0_15 is available | sun-java6 (Ubuntu) | Undecided | Fix Released | ||
| 409559 | version 1.6.0_15 is available | The Dell Mini Project | Undecided | Invalid | ||
| 409559 | version 1.6.0_15 is available | Jaunty Jackalope Backports | Undecided | Invalid | ||
| 409559 | version 1.6.0_15 is available | Intrepid Ibex Backports | Undecided | Invalid | ||
| 409559 | version 1.6.0_15 is available | Hardy Backports | Undecided | Invalid | ||
| 409559 | version 1.6.0_15 is available | sun-java6 (Ubuntu Hardy) | Undecided | Fix Released | ||
| 409559 | version 1.6.0_15 is available | sun-java6 (Ubuntu Karmic) | Undecided | Fix Released | ||
| 409559 | version 1.6.0_15 is available | sun-java6 (Ubuntu Intrepid) | Undecided | Invalid | ||
| 409559 | version 1.6.0_15 is available | sun-java6 (Ubuntu Jaunty) | Undecided | Fix Released | ||
Bug #420426: sun-java6 6b16 update for karmic, hardy and jaunty
| Summary | In | Importance | Status | |||
|---|---|---|---|---|---|---|
| 420426 | sun-java6 6b16 update for karmic, hardy and jaunty | sun-java6 (Ubuntu) | Undecided | Fix Released | ||
| 420426 | sun-java6 6b16 update for karmic, hardy and jaunty | sun-java6 (Ubuntu Hardy) | Undecided | Fix Released | ||
| 420426 | sun-java6 6b16 update for karmic, hardy and jaunty | sun-java6 (Ubuntu Jaunty) | Undecided | Fix Released | ||
| 420426 | sun-java6 6b16 update for karmic, hardy and jaunty | sun-java6 (Ubuntu Karmic) | Undecided | Fix Released | ||
Bug #611731: Segmentation fault when parsing malformed XML (null pointer dereference)
| Summary | In | Importance | Status | |||
|---|---|---|---|---|---|---|
| 611731 | Segmentation fault when parsing malformed XML (null pointer dereference) | python2.3-xml (Ubuntu) | Undecided | Confirmed | ||
See the 
CVE page on Mitre.org
for more details.
