CVE-2013-4002

CVE-2013-4002 describes a denial-of-service vulnerability in the Apache Xerces2 Java Parser, specifically in the XMLscanner.java component, affecting various Java Runtime Environments from IBM and Oracle, among others. An unauthenticated remote attacker can exploit this flaw by crafting malicious XML attribute names, leading to a complete denial of service. While the CVSS score of 7.1 indicates high severity with a network attack vector and medium attack complexity, there is no evidence of active exploitation, publicly available exploit code, or significant community discussion surrounding this vulnerability.