CVE-2013-2154

Desbordamiento de búfer basado en pila en la funcionalidad Reference (xsec/dsig/DSIGReference.cpp) en Apache Santuario XML Security para C++ (aka xml-security-c) anterior a 1.7.1, permite a atacantes dependientes del contexto provocar una denegación de servicio (caída) y posiblemente la ejecución arbitraria de código a través de expresiones XPointer mal formadas, probablemente relacionadas con la función DSIGReference::getURIBaseTXFM.

The attempted fix to address CVE-2013-2154 introduced the possibility of a heap overflow, possibly leading to arbitrary code execution, in the processing of malformed XPointer expressions in the XML Signature Reference processing code. An attacker could use this to exploit an application performing signature verification if the application does not block the evaluation of such references prior to performing the verification step. The exploit would occur prior to the actual verification of the signature, so does not require authenticated content. Apache Santuario XML Security for C++ library versions prior to 1.7.2 are affected.