| CVE-2019-1187 | Date: (C)2019-08-15 (M)2024-05-31 |
A denial of service vulnerability exists when the XmlLite runtime (XmlLite.dll) improperly parses XML input. An attacker who successfully exploited this vulnerability could cause a denial of service against an XML application.
A remote unauthenticated attacker could exploit this vulnerability by issuing specially crafted requests to an XML application.
The update addresses the vulnerability by correcting how the XmlLite runtime parses XML input.
CVSS Score and Metrics +CVSS Score and Metrics -| CVSS V3 Severity: | CVSS V2 Severity: |
| CVSS Score : 5.5 | CVSS Score : 5.0 |
| Exploit Score: 1.8 | Exploit Score: 10.0 |
| Impact Score: 3.6 | Impact Score: 2.9 |
| |
| CVSS V3 Metrics: | CVSS V2 Metrics: |
| Attack Vector: LOCAL | Access Vector: NETWORK |
| Attack Complexity: LOW | Access Complexity: LOW |
| Privileges Required: LOW | Authentication: NONE |
| User Interaction: NONE | Confidentiality: NONE |
| Scope: UNCHANGED | Integrity: NONE |
| Confidentiality: NONE | Availability: PARTIAL |
| Integrity: NONE | |
| Availability: HIGH | |
| | |
