CVE-2004-1575: Apache Xerces-C++

Medium severity, CVSS 5.0. EPSS: 6.2% chance of exploitation in the next 30 days.

The XML parser in Xerces-C++ 2.5.0 allows remote attackers to cause a denial of service (CPU consumption) via XML attributes in a crafted XML document.

Affected products

• Apache Xerces-C++: version 2.5.0 only

Published 2004-12-31. Last modified 2026-06-16.