high7.5
CVE-2017-8315
Eclipse XML parser for the Eclipse IDE versions 2017.2.5 and earlier was found vulnerable to an XML External Entity attack.
Impact
Eclipse XML parser for the Eclipse IDE versions 2017.2.5 and earlier was found vulnerable to an XML External Entity attack. An attacker can exploit the vulnerability by implementing malicious code on Androidmanifest.xml.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Eclipse | Ide | Version 2017.2.5 |
Weakness classification
References
- NVD record
- CVE.org record
- https://bugs.eclipse.org/bugs/show_bug.cgi?id=519169
- https://research.checkpoint.com/parsedroid-targeting-android-development-research-community/
- https://bugs.eclipse.org/bugs/show_bug.cgi?id=519169
- https://research.checkpoint.com/parsedroid-targeting-android-development-research-community/