https://bugzilla.redhat.com/show_bug.cgi?id=1524585
Bug ID: 1524585
Summary: CVE-2016-4216 xmpcore: XXE resulting in information
disclosure
Product: Security Response
Component: vulnerability
Keywords: Security
Severity: medium
Priority: medium
Assignee: security-response-team(a)redhat.com
Reporter: anemec(a)redhat.com
CC: alazarot(a)redhat.com, anstephe(a)redhat.com,
cedric.olivier(a)free.fr, etirelli(a)redhat.com,
felias(a)redhat.com, hchiorea(a)redhat.com,
ibek(a)redhat.com,
java-sig-commits(a)lists.fedoraproject.org,
jcoleman(a)redhat.com, jolee(a)redhat.com,
kverlaen(a)redhat.com, lpetrovi(a)redhat.com,
nwallace(a)redhat.com, paradhya(a)redhat.com,
pavelp(a)redhat.com, pszubiak(a)redhat.com,
puntogil(a)libero.it, rrajasek(a)redhat.com,
rsynek(a)redhat.com, rzhang(a)redhat.com,
sdaley(a)redhat.com, vhalbert(a)redhat.com
XMPCore in Adobe XMP Toolkit for Java before 5.1.3 allows remote attackers to
read arbitrary files via XML data containing an external entity declaration in
conjunction with an entity reference, related to an XML External Entity (XXE)
issue.
External References:
https://helpx.adobe.com/security/products/xmpcore/apsb16-24.html
--
You are receiving this mail because:
You are on the CC list for the bug.