Launchpad.net

CVE 2016-4463

Stack-based buffer overflow in Apache Xerces-C++ before 3.1.4 allows context-dependent attackers to cause a denial of service via a deeply nested DTD.

See the CVE page on Mitre.org for more details.