• From: Rick Jelliffe <rjelliffe@a...>
• To: "Costello, Roger L." <costello@m...>
• Date: Thu, 13 Aug 2009 13:44:18 +1000

I looked around for some info.

See
  http://broadcast.oreilly.com/2009/08/is-a-large-document-really-a-p.html

There was a note on a site recently that Xerces-J had been incorrectly 
identified for a buffer overrun problem (not surprisingly): it was Xerces-C.

Cheers
Rick

• References:
  • Article: Vulnerability In XML Libraries Discovered ... what are thevulnerabilities?
    • From: "Costello, Roger L." <costello@m...>