http://lists.apple.com/archives/security-announce/2009/Sep/msg00000.html

http://lists.opensuse.org/opensuse-security-announce/2009-10/msg00001.html

http://lists.opensuse.org/opensuse-security-announce/2009-10/msg00004.html

http://lists.opensuse.org/opensuse-security-announce/2009-11/msg00002.html

http://lists.opensuse.org/opensuse-security-announce/2010-06/msg00001.html

http://marc.info/?l=bugtraq&m=125787273209737&w=2

http://marc.info/?l=bugtraq&m=125787273209737&w=2

http://rhn.redhat.com/errata/RHSA-2012-1232.html

http://rhn.redhat.com/errata/RHSA-2012-1537.html

http://secunia.com/advisories/36162

http://secunia.com/advisories/36176

http://secunia.com/advisories/36180

http://secunia.com/advisories/36199

http://secunia.com/advisories/37300

http://secunia.com/advisories/37460

http://secunia.com/advisories/37671

http://secunia.com/advisories/37754

http://secunia.com/advisories/38231

http://secunia.com/advisories/38342

http://secunia.com/advisories/43300

http://secunia.com/advisories/50549

http://slackware.com/security/viewer.php?l=slackware-security&y=2011&m=slackware-security.486026

http://sunsolve.sun.com/search/document.do?assetkey=1-21-125136-16-1

http://sunsolve.sun.com/search/document.do?assetkey=1-66-263489-1

http://sunsolve.sun.com/search/document.do?assetkey=1-66-272209-1

http://sunsolve.sun.com/search/document.do?assetkey=1-77-1021506.1-1

http://svn.apache.org/viewvc/xerces/java/trunk/src/org/apache/xerces/impl/XMLScanner.java?r1=572055&r2=787352&pathrev=787353&diff_format=h

http://www.cert.fi/en/reports/2009/vulnerability2009085.html

http://www.codenomicon.com/labs/xml/

http://www.debian.org/security/2010/dsa-1984

http://www.mandriva.com/security/advisories?name=MDVSA-2009:209

http://www.mandriva.com/security/advisories?name=MDVSA-2011:108

http://www.networkworld.com/columnists/2009/080509-xml-flaw.html

http://www.openwall.com/lists/oss-security/2009/09/06/1

http://www.openwall.com/lists/oss-security/2009/10/22/9

http://www.openwall.com/lists/oss-security/2009/10/23/6

http://www.openwall.com/lists/oss-security/2009/10/26/3

http://www.oracle.com/technetwork/topics/security/cpujan2010-084891.html

http://www.oracle.com/technetwork/topics/security/cpuoct2009-096303.html

http://www.redhat.com/support/errata/RHSA-2009-1615.html

http://www.redhat.com/support/errata/RHSA-2011-0858.html

http://www.securityfocus.com/archive/1/507985/100/0/threaded

http://www.securityfocus.com/bid/35958

http://www.securitytracker.com/id?1022680

http://www.ubuntu.com/usn/USN-890-1

http://www.us-cert.gov/cas/techalerts/TA09-294A.html

http://www.us-cert.gov/cas/techalerts/TA10-012A.html

http://www.vmware.com/security/advisories/VMSA-2009-0016.html

http://www.vupen.com/english/advisories/2009/2543

http://www.vupen.com/english/advisories/2009/3316

http://www.vupen.com/english/advisories/2011/0359

https://bugzilla.redhat.com/show_bug.cgi?id=512921

https://lists.apache.org/thread.html/r204ba2a9ea750f38d789d2bb429cc0925ad6133deea7cbc3001d96b5%40%3Csolr-user.lucene.apache.org%3E

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8520

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9356

https://rhn.redhat.com/errata/RHSA-2009-1199.html

https://rhn.redhat.com/errata/RHSA-2009-1200.html

https://rhn.redhat.com/errata/RHSA-2009-1201.html

https://rhn.redhat.com/errata/RHSA-2009-1636.html

https://rhn.redhat.com/errata/RHSA-2009-1637.html

https://rhn.redhat.com/errata/RHSA-2009-1649.html

https://rhn.redhat.com/errata/RHSA-2009-1650.html

https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00310.html

https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00325.html

CERT/CC https://lists.apache.org/thread.html/r204ba2a9ea750f38d789d2bb429cc0925ad6133deea7cbc3001d96b5%40%3Csolr-user.lucene.apache.org%3E [No types assigned]

CERT/CC https://lists.apache.org/thread.html/r204ba2a9ea750f38d789d2bb429cc0925ad6133deea7cbc3001d96b5@%3Csolr-user.lucene.apache.org%3E

OR
     *cpe:2.3:a:oracle:jdk:1.6.0:update_01:*:*:*:*:*:*

OR
     *cpe:2.3:a:oracle:jdk:1.6.0:update1:*:*:*:*:*:*

OR
     *cpe:2.3:a:oracle:jdk:1.6.0:update_02:*:*:*:*:*:*

OR
     *cpe:2.3:a:oracle:jdk:1.6.0:update2:*:*:*:*:*:*

OR
     *cpe:2.3:a:oracle:jdk:1.6.0:update_03:*:*:*:*:*:*

OR
     *cpe:2.3:a:oracle:jdk:1.6.0:update3:*:*:*:*:*:*

OR
     *cpe:2.3:a:oracle:jdk:1.6.0:update_04:*:*:*:*:*:*

OR
     *cpe:2.3:a:oracle:jdk:1.6.0:update4:*:*:*:*:*:*

OR
     *cpe:2.3:a:oracle:jdk:1.6.0:update_05:*:*:*:*:*:*

OR
     *cpe:2.3:a:oracle:jdk:1.6.0:update5:*:*:*:*:*:*

OR
     *cpe:2.3:a:oracle:jdk:1.6.0:update_06:*:*:*:*:*:*

OR
     *cpe:2.3:a:oracle:jdk:1.6.0:update6:*:*:*:*:*:*

OR
     *cpe:2.3:a:oracle:jdk:1.6.0:update_07:*:*:*:*:*:*

OR
     *cpe:2.3:a:oracle:jdk:1.6.0:update7:*:*:*:*:*:*

OR
     *cpe:2.3:a:oracle:jdk:1.6.0:update_10:*:*:*:*:*:*

OR
     *cpe:2.3:a:oracle:jdk:1.6.0:update10:*:*:*:*:*:*

OR
     *cpe:2.3:a:oracle:jdk:1.6.0:update_11:*:*:*:*:*:*

OR
     *cpe:2.3:a:oracle:jdk:1.6.0:update11:*:*:*:*:*:*

OR
     *cpe:2.3:a:oracle:jdk:1.6.0:update_12:*:*:*:*:*:*

OR
     *cpe:2.3:a:oracle:jdk:1.6.0:update12:*:*:*:*:*:*

OR
     *cpe:2.3:a:oracle:jdk:1.6.0:update_13:*:*:*:*:*:*

OR
     *cpe:2.3:a:oracle:jdk:1.6.0:update13:*:*:*:*:*:*

OR
     *cpe:2.3:a:oracle:jdk:1.6.0:update_14:*:*:*:*:*:*

OR
     *cpe:2.3:a:oracle:jdk:1.6.0:update14:*:*:*:*:*:*

NIST NVD-CWE-Other

NIST CWE-264

OR
     *cpe:2.3:a:sun:jdk:5.0:update_1:*:*:*:*:*:*
     *cpe:2.3:a:sun:jdk:5.0:update_10:*:*:*:*:*:*
     *cpe:2.3:a:sun:jdk:5.0:update_11:*:*:*:*:*:*
     *cpe:2.3:a:sun:jdk:5.0:update_12:*:*:*:*:*:*
     *cpe:2.3:a:sun:jdk:5.0:update_13:*:*:*:*:*:*
     *cpe:2.3:a:sun:jdk:5.0:update_14:*:*:*:*:*:*
     *cpe:2.3:a:sun:jdk:5.0:update_15:*:*:*:*:*:*
     *cpe:2.3:a:sun:jdk:5.0:update_16:*:*:*:*:*:*
     *cpe:2.3:a:sun:jdk:5.0:update_17:*:*:*:*:*:*
     *cpe:2.3:a:sun:jdk:5.0:update_2:*:*:*:*:*:*

OR
     *cpe:2.3:a:oracle:jdk:1.5.0:-:*:*:*:*:*:*
     *cpe:2.3:a:oracle:jdk:1.5.0:update1:*:*:*:*:*:*
     *cpe:2.3:a:oracle:jdk:1.5.0:update10:*:*:*:*:*:*
     *cpe:2.3:a:oracle:jdk:1.5.0:update11:*:*:*:*:*:*
     *cpe:2.3:a:oracle:jdk:1.5.0:update12:*:*:*:*:*:*
     *cpe:2.3:a:oracle:jdk:1.5.0:update13:*:*:*:*:*:*
     *cpe:2.3:a:oracle:jdk:1.5.0:update14:*:*:*:*:*:*
     *cpe:2.3:a:oracle:jdk:1.5.0:update15:*:*:*:*:*:*
     *cpe:2.3:a:oracle:jdk:1.5.0:update16:*:*:*:*:*:*
     *cpe:2.3:a:ora

OR
     *cpe:2.3:a:apache:xerces2_java:2.9.1:*:*:*:*:*:*:*

OR
     *cpe:2.3:a:oracle:primavera_p6_enterprise_project_portfolio_management:6.1:*:*:*:*:*:*:*
     *cpe:2.3:a:oracle:primavera_p6_enterprise_project_portfolio_management:6.2.1:*:*:*:*:*:*:*
     *cpe:2.3:a:oracle:primavera_p6_enterprise_project_portfolio_management:7.0:*:*:*:*:*:*:*
     *cpe:2.3:a:oracle:primavera_web_services:6.2.1:*:*:*:*:*:*:*
     *cpe:2.3:a:oracle:primavera_web_services:7.0:-:*:*:*:*:*:*
     *cpe:2.3:a:oracle:primavera_web_services:7.0:sp1:*:*:*:*:*:*

OR
     *cpe:2.3:o:canonical:ubuntu_linux:6.06:*:*:*:*:*:*:*
     *cpe:2.3:o:canonical:ubuntu_linux:8.04:*:*:*:-:*:*:*
     *cpe:2.3:o:canonical:ubuntu_linux:8.10:*:*:*:*:*:*:*
     *cpe:2.3:o:canonical:ubuntu_linux:9.04:*:*:*:*:*:*:*
     *cpe:2.3:o:canonical:ubuntu_linux:9.10:*:*:*:*:*:*:*

OR
     *cpe:2.3:o:debian:debian_linux:4.0:*:*:*:*:*:*:*
     *cpe:2.3:o:debian:debian_linux:5.0:*:*:*:*:*:*:*

OR
     *cpe:2.3:o:fedoraproject:fedora:10:*:*:*:*:*:*:*
     *cpe:2.3:o:fedoraproject:fedora:11:*:*:*:*:*:*:*

OR
     *cpe:2.3:o:opensuse:opensuse:11.0:*:*:*:*:*:*:*
     *cpe:2.3:o:opensuse:opensuse:11.1:*:*:*:*:*:*:*
     *cpe:2.3:o:opensuse:opensuse:11.2:*:*:*:*:*:*:*
     *cpe:2.3:o:suse:linux_enterprise_server:9:*:*:*:*:*:*:*
     *cpe:2.3:o:suse:linux_enterprise_server:10:sp2:*:*:*:*:*:*
     *cpe:2.3:o:suse:linux_enterprise_server:10:sp3:*:*:-:*:*:*
     *cpe:2.3:o:suse:linux_enterprise_server:11:-:*:*:*:*:*:*

http://lists.apple.com/archives/security-announce/2009/Sep/msg00000.html No Types Assigned

http://lists.apple.com/archives/security-announce/2009/Sep/msg00000.html Mailing List, Third Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2009-10/msg00001.html No Types Assigned

http://lists.opensuse.org/opensuse-security-announce/2009-10/msg00001.html Third Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2009-10/msg00004.html No Types Assigned

http://lists.opensuse.org/opensuse-security-announce/2009-10/msg00004.html Third Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2009-11/msg00002.html No Types Assigned

http://lists.opensuse.org/opensuse-security-announce/2009-11/msg00002.html Third Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2010-06/msg00001.html No Types Assigned

http://lists.opensuse.org/opensuse-security-announce/2010-06/msg00001.html Third Party Advisory

http://marc.info/?l=bugtraq&m=125787273209737&w=2 No Types Assigned

http://marc.info/?l=bugtraq&m=125787273209737&w=2 Mailing List, Third Party Advisory

http://rhn.redhat.com/errata/RHSA-2012-1232.html No Types Assigned

http://rhn.redhat.com/errata/RHSA-2012-1232.html Broken Link

http://rhn.redhat.com/errata/RHSA-2012-1537.html No Types Assigned

http://rhn.redhat.com/errata/RHSA-2012-1537.html Broken Link

http://secunia.com/advisories/36162 No Types Assigned

http://secunia.com/advisories/36162 Third Party Advisory

http://secunia.com/advisories/36176 No Types Assigned

http://secunia.com/advisories/36176 Third Party Advisory

http://secunia.com/advisories/36180 No Types Assigned

http://secunia.com/advisories/36180 Third Party Advisory

http://secunia.com/advisories/36199 No Types Assigned

http://secunia.com/advisories/36199 Third Party Advisory

http://secunia.com/advisories/37300 No Types Assigned

http://secunia.com/advisories/37300 Third Party Advisory

http://secunia.com/advisories/37460 No Types Assigned

http://secunia.com/advisories/37460 Third Party Advisory

http://secunia.com/advisories/37671 No Types Assigned

http://secunia.com/advisories/37671 Third Party Advisory

http://secunia.com/advisories/37754 No Types Assigned

http://secunia.com/advisories/37754 Third Party Advisory

http://secunia.com/advisories/38231 No Types Assigned

http://secunia.com/advisories/38231 Third Party Advisory

http://secunia.com/advisories/38342 No Types Assigned

http://secunia.com/advisories/38342 Third Party Advisory

http://secunia.com/advisories/43300 No Types Assigned

http://secunia.com/advisories/43300 Third Party Advisory

http://secunia.com/advisories/50549 No Types Assigned

http://secunia.com/advisories/50549 Third Party Advisory

http://slackware.com/security/viewer.php?l=slackware-security&y=2011&m=slackware-security.486026 No Types Assigned

http://slackware.com/security/viewer.php?l=slackware-security&y=2011&m=slackware-security.486026 Third Party Advisory

http://sunsolve.sun.com/search/document.do?assetkey=1-21-125136-16-1 Patch

http://sunsolve.sun.com/search/document.do?assetkey=1-21-125136-16-1 Broken Link, Patch

http://sunsolve.sun.com/search/document.do?assetkey=1-66-263489-1 Patch, Vendor Advisory

http://sunsolve.sun.com/search/document.do?assetkey=1-66-263489-1 Broken Link, Patch, Vendor Advisory

http://sunsolve.sun.com/search/document.do?assetkey=1-66-272209-1 No Types Assigned

http://sunsolve.sun.com/search/document.do?assetkey=1-66-272209-1 Broken Link

http://sunsolve.sun.com/search/document.do?assetkey=1-77-1021506.1-1 No Types Assigned

http://sunsolve.sun.com/search/document.do?assetkey=1-77-1021506.1-1 Broken Link

http://svn.apache.org/viewvc/xerces/java/trunk/src/org/apache/xerces/impl/XMLScanner.java?r1=572055&r2=787352&pathrev=787353&diff_format=h No Types Assigned

http://svn.apache.org/viewvc/xerces/java/trunk/src/org/apache/xerces/impl/XMLScanner.java?r1=572055&r2=787352&pathrev=787353&diff_format=h Patch, Vendor Advisory

http://www.cert.fi/en/reports/2009/vulnerability2009085.html No Types Assigned

http://www.cert.fi/en/reports/2009/vulnerability2009085.html Third Party Advisory

http://www.codenomicon.com/labs/xml/ No Types Assigned

http://www.codenomicon.com/labs/xml/ Third Party Advisory

http://www.debian.org/security/2010/dsa-1984 No Types Assigned

http://www.debian.org/security/2010/dsa-1984 Third Party Advisory

http://www.mandriva.com/security/advisories?name=MDVSA-2009:209 No Types Assigned

http://www.mandriva.com/security/advisories?name=MDVSA-2009:209 Third Party Advisory

http://www.mandriva.com/security/advisories?name=MDVSA-2011:108 No Types Assigned

http://www.mandriva.com/security/advisories?name=MDVSA-2011:108 Third Party Advisory

http://www.networkworld.com/columnists/2009/080509-xml-flaw.html No Types Assigned

http://www.networkworld.com/columnists/2009/080509-xml-flaw.html Third Party Advisory

http://www.openwall.com/lists/oss-security/2009/09/06/1 No Types Assigned

http://www.openwall.com/lists/oss-security/2009/09/06/1 Mailing List, Third Party Advisory

http://www.openwall.com/lists/oss-security/2009/10/22/9 No Types Assigned

http://www.openwall.com/lists/oss-security/2009/10/22/9 Mailing List, Patch, Third Party Advisory

http://www.openwall.com/lists/oss-security/2009/10/23/6 No Types Assigned

http://www.openwall.com/lists/oss-security/2009/10/23/6 Mailing List, Third Party Advisory

http://www.openwall.com/lists/oss-security/2009/10/26/3 No Types Assigned

http://www.openwall.com/lists/oss-security/2009/10/26/3 Mailing List, Third Party Advisory

http://www.oracle.com/technetwork/topics/security/cpujan2010-084891.html No Types Assigned

http://www.oracle.com/technetwork/topics/security/cpujan2010-084891.html Third Party Advisory

http://www.oracle.com/technetwork/topics/security/cpuoct2009-096303.html No Types Assigned

http://www.oracle.com/technetwork/topics/security/cpuoct2009-096303.html Broken Link

http://www.redhat.com/support/errata/RHSA-2009-1615.html No Types Assigned

http://www.redhat.com/support/errata/RHSA-2009-1615.html Third Party Advisory

http://www.redhat.com/support/errata/RHSA-2011-0858.html No Types Assigned

http://www.redhat.com/support/errata/RHSA-2011-0858.html Third Party Advisory

http://www.securityfocus.com/archive/1/507985/100/0/threaded No Types Assigned

http://www.securityfocus.com/archive/1/507985/100/0/threaded Third Party Advisory, VDB Entry

http://www.securityfocus.com/bid/35958 No Types Assigned

http://www.securityfocus.com/bid/35958 Third Party Advisory, VDB Entry

http://www.securitytracker.com/id?1022680 No Types Assigned

http://www.securitytracker.com/id?1022680 Third Party Advisory, VDB Entry

http://www.ubuntu.com/usn/USN-890-1 No Types Assigned

http://www.ubuntu.com/usn/USN-890-1 Third Party Advisory

http://www.us-cert.gov/cas/techalerts/TA09-294A.html US Government Resource

http://www.us-cert.gov/cas/techalerts/TA09-294A.html Third Party Advisory, US Government Resource

http://www.us-cert.gov/cas/techalerts/TA10-012A.html US Government Resource

http://www.us-cert.gov/cas/techalerts/TA10-012A.html Third Party Advisory, US Government Resource

http://www.vmware.com/security/advisories/VMSA-2009-0016.html No Types Assigned

http://www.vmware.com/security/advisories/VMSA-2009-0016.html Third Party Advisory

http://www.vupen.com/english/advisories/2009/2543 No Types Assigned

http://www.vupen.com/english/advisories/2009/2543 Permissions Required

http://www.vupen.com/english/advisories/2009/3316 No Types Assigned

http://www.vupen.com/english/advisories/2009/3316 Permissions Required

http://www.vupen.com/english/advisories/2011/0359 No Types Assigned

http://www.vupen.com/english/advisories/2011/0359 Permissions Required

https://bugzilla.redhat.com/show_bug.cgi?id=512921 No Types Assigned

https://bugzilla.redhat.com/show_bug.cgi?id=512921 Issue Tracking, Third Party Advisory

https://lists.apache.org/thread.html/r204ba2a9ea750f38d789d2bb429cc0925ad6133deea7cbc3001d96b5@%3Csolr-user.lucene.apache.org%3E No Types Assigned

https://lists.apache.org/thread.html/r204ba2a9ea750f38d789d2bb429cc0925ad6133deea7cbc3001d96b5@%3Csolr-user.lucene.apache.org%3E Mailing List, Vendor Advisory

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8520 No Types Assigned

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8520 Third Party Advisory

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9356 No Types Assigned

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9356 Third Party Advisory

https://rhn.redhat.com/errata/RHSA-2009-1199.html No Types Assigned

https://rhn.redhat.com/errata/RHSA-2009-1199.html Broken Link

https://rhn.redhat.com/errata/RHSA-2009-1200.html No Types Assigned

https://rhn.redhat.com/errata/RHSA-2009-1200.html Broken Link

https://rhn.redhat.com/errata/RHSA-2009-1201.html No Types Assigned

https://rhn.redhat.com/errata/RHSA-2009-1201.html Broken Link

https://rhn.redhat.com/errata/RHSA-2009-1636.html No Types Assigned

https://rhn.redhat.com/errata/RHSA-2009-1636.html Broken Link

https://rhn.redhat.com/errata/RHSA-2009-1637.html No Types Assigned

https://rhn.redhat.com/errata/RHSA-2009-1637.html Broken Link

https://rhn.redhat.com/errata/RHSA-2009-1649.html No Types Assigned

https://rhn.redhat.com/errata/RHSA-2009-1649.html Broken Link

https://rhn.redhat.com/errata/RHSA-2009-1650.html No Types Assigned

https://rhn.redhat.com/errata/RHSA-2009-1650.html Broken Link

https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00310.html No Types Assigned

https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00310.html Mailing List, Third Party Advisory

https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00325.html No Types Assigned

https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00325.html Mailing List, Third Party Advisory

https://lists.apache.org/thread.html/r204ba2a9ea750f38d789d2bb429cc0925ad6133deea7cbc3001d96b5@%3Csolr-user.lucene.apache.org%3E [No Types Assigned]

http://www.securityfocus.com/archive/1/507985/100/0/threaded [No Types Assigned]

http://www.securityfocus.com/archive/1/archive/1/507985/100/0/threaded [No Types Assigned]

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8520 [No Types Assigned]

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9356 [No Types Assigned]

http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:8520 [No Types Assigned]

http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:9356 [No Types Assigned]