CVEvulnerability
CVE-2017-8315
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2018-04-20
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.0 ([email protected])
- 7.5 HIGH — CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
- CVSS 2.0 ([email protected])
- 7.8 HIGH — AV:N/AC:L/Au:N/C:C/I:N/A:N
- Weaknesses
- CWE-611
Description
Eclipse XML parser for the Eclipse IDE versions 2017.2.5 and earlier was found vulnerable to an XML External Entity attack. An attacker can exploit the vulnerability by implementing malicious code on Androidmanifest.xml.
Affected configurations
• eclipse ide 2017.2.5
Related
Weakness · CWE (1)
- CWE-611 Improper Restriction of XML External Entity Reference weakness
References
- https://bugs.eclipse.org/bugs/show_bug.cgi?id=519169 Permissions Required, Vendor Advisory
- https://research.checkpoint.com/parsedroid-targeting-android-development-research-community/ Exploit, Technical Description, Third Party Advisory
- https://bugs.eclipse.org/bugs/show_bug.cgi?id=519169 Permissions Required, Vendor Advisory
- https://research.checkpoint.com/parsedroid-targeting-android-development-research-community/ Exploit, Technical Description, Third Party Advisory