DoS vulnerability in XML/src/xmlparse.cpp

[the-Chain-Warden-thresh]

Version

latest on branch devel

Description

Poco uses libexpat to parse XML file. However, I've found that Poco doesn't fix a vulnerability in libexpat, i.e. CVE-2009-3560, which may cause a buffer over-read, and then results in a denial of service (application crash).
Specifically, next = end; ( line 3835 in XML/src/xmlparse.cpp ) should be removed to fix this vulnerability. You can check infomation and patch of this CVE for further confirmation:
Description of CVE-2009-3560: https://nvd.nist.gov/vuln/detail/https://nvd.nist.gov/vuln/detail/CVE-2009-3560[2009-3720](https://nvd.nist.gov/vuln/detail/CVE-2009-3720)
Patch commit of CVE-2009-3720: libexpat/libexpat@82d4951

[obiltschnig]

This has not been fixed in upstream libexpat either, so we're waiting for an upstream fix.