Denial of Service Vulnerability in IBM Rational DOORS Next Generation and Rational Requirements Composer

CVE-2015-0132

Summary

The XML parser vulnerability in IBM Rational DOORS Next Generation and Rational Requirements Composer allows remote attackers to trigger a denial of service condition. This occurs through the submission of specially crafted XML documents that exploit recursion during entity expansion, leading to excessive memory consumption. Affected versions include Rational DOORS Next Generation versions earlier than 4.0.7 iFix3 and 5.0.2, as well as Rational Requirements Composer versions earlier than 3.0.1.6 iFix5.

References