A vulnerability has been reported in Xerces-C++, which can be exploited by malicious people to cause a DoS (Denial of Service).

The vulnerability is caused due to an infinite recursion error when parsing simply nested DTD structures and can be exploited to cause a crash via a specially crafted XML file.

Solution
Fixed in the SVN repository.
Further details available to Secunia VIM customers

Provided and/or discovered by
Jukka Taimisto, Tero Rontti and Rauli Kaksonen from the CROSS project at Codenomicon Ltd, reported via CERT-FI

Original Advisory
Apache:
http://svn.apache.org/viewvc?view=rev&revision=781488

CERT-FI:
http://www.cert.fi/en/reports/2009/vulnerability2009085.html

Deep Links
Links available to Secunia VIM customers