Description

The XML_RPC_cd function in lib/pear/XML/RPC.php in Revive Adserver before 3.0.6 allows remote attackers to cause a denial of service (CPU and memory consumption) via a crafted XML-RPC request, aka an XML Entity Expansion (XEE) attack.

Remediation

References

CVE-2014-8875

Related Vulnerabilities

PHP Insufficient Entropy Vulnerability (CVE-2008-2108)

WordPress User-Agent SQL Injection Vulnerability (1.5.2)

WordPress Plugin Ultimate Member-User Profile, Registration, Login, Member Directory, Content Restriction & Membership Cross-Site Scripting (2.3.2)

Joomla Improper Input Validation Vulnerability (CVE-2008-4105)

PHP Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2009-3546)

Severity

Medium

Classification

CVE-2014-8875

Tags

Missing Update Known Vulnerabilities