{"id":"CVE-2017-8315","aliases":["DEBIAN-CVE-2017-8315","EUVD-2017-17276","GHSA-f33m-7gg2-3cm2","UBUNTU-CVE-2017-8315"],"status":"published","title":"Eclipse XML parser for the Eclipse IDE versions 2017.2.5 and earlier was found vulnerable to an...","description":"Eclipse XML parser for the Eclipse IDE versions 2017.2.5 and earlier was found vulnerable to an XML External Entity attack. An attacker can exploit the vulnerability by implementing malicious code on Androidmanifest.xml.","severity":{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.01627,"percentile":0.76341,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-611"],"published":"2018-04-20T19:00:00Z","modified":"2026-09-01T20:03:51Z","fixes":[{"ecosystem":"Debian:12","package":"apktool","fixed_in":["2.2.4-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"apktool","fixed_in":["2.2.4-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"apktool","fixed_in":["2.2.4-1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:12","package":"apktool","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.4-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"apktool","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.4-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"apktool","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.4-1"}]}]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"apktool","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.0.2+dfsg-1","2.0.2+dfsg-2"]}],"products":[{"vendor":"check point software technologies ltd.","product":"eclipse"},{"vendor":"eclipse","product":"ide"}],"references":[{"url":"https://bugs.eclipse.org/bugs/show_bug.cgi?id=519169","tags":["x_refsource_CONFIRM","x_transferred","Permissions Required","Vendor Advisory","report"]},{"url":"https://research.checkpoint.com/parsedroid-targeting-android-development-research-community/","tags":["x_refsource_MISC","x_transferred","Exploit","Technical Description","Third Party Advisory","evidence","report"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-8315"},{"url":"https://github.com/advisories/GHSA-f33m-7gg2-3cm2"},{"url":"https://security-tracker.debian.org/tracker/CVE-2017-8315","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2017-8315","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-8315","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2017-8315","description":"Eclipse XML parser for the Eclipse IDE versions 2017.2.5 and earlier was found vulnerable to an XML External Entity attack. An attacker can exploit the vulnerability by implementing malicious code on Androidmanifest.xml.","status":"published","published":"2018-04-20T19:00:00Z","modified":"2024-09-17T02:37:41.46Z","updated_at":"2026-11-02T14:33:15.201133Z"}],"euvd":[{"id":"EUVD-2017-17276","description":"Eclipse XML parser for the Eclipse IDE versions 2017.2.5 and earlier was found vulnerable to an XML External Entity attack. An attacker can exploit the vulnerability by implementing malicious code on Androidmanifest.xml.","status":"published","published":"2018-04-20T19:00:00Z","modified":"2024-09-17T02:37:41Z","updated_at":"2026-11-03T00:28:38.75517Z"}],"ghsa":[{"id":"GHSA-f33m-7gg2-3cm2","title":"Eclipse XML parser for the Eclipse IDE versions 2017.2.5 and earlier was found vulnerable to an...","description":"Eclipse XML parser for the Eclipse IDE versions 2017.2.5 and earlier was found vulnerable to an XML External Entity attack. An attacker can exploit the vulnerability by implementing malicious code on Androidmanifest.xml.","status":"published","published":"2022-05-14T03:22:02Z","modified":"2023-02-02T05:08:07Z","cvss":[{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high"}],"cwes":["CWE-611"],"updated_at":"2026-11-02T14:52:40.390802Z"}],"nvd":[{"id":"CVE-2017-8315","description":"Eclipse XML parser for the Eclipse IDE versions 2017.2.5 and earlier was found vulnerable to an XML External Entity attack. An attacker can exploit the vulnerability by implementing malicious code on Androidmanifest.xml.","status":"published","published":"2018-04-20T19:29:00.503Z","modified":"2026-06-17T01:26:10.553Z","cvss":[{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high","assessor":"primary"},{"version":"2.0","score":7.8,"vector":"AV:N/AC:L/Au:N/C:C/I:N/A:N","level":"high","assessor":"primary"}],"cwes":["CWE-611"],"updated_at":"2026-11-02T14:04:17.032862Z"}],"osv":[{"id":"CVE-2017-8315","description":"Eclipse XML parser for the Eclipse IDE versions 2017.2.5 and earlier was found vulnerable to an XML External Entity attack. An attacker can exploit the vulnerability by implementing malicious code on Androidmanifest.xml.","status":"published","published":"2018-04-20T19:29:00.503Z","modified":"2026-03-13T23:34:10.266829Z","cvss":[{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high"}],"updated_at":"2026-11-02T15:44:06.868403Z"},{"id":"DEBIAN-CVE-2017-8315","description":"Eclipse XML parser for the Eclipse IDE versions 2017.2.5 and earlier was found vulnerable to an XML External Entity attack. An attacker can exploit the vulnerability by implementing malicious code on Androidmanifest.xml.","status":"published","published":"2018-04-20T19:29:00.503Z","modified":"2026-09-01T20:03:51.430500333Z","cvss":[{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high"}],"updated_at":"2026-11-02T15:45:29.698576Z"},{"id":"UBUNTU-CVE-2017-8315","description":"Eclipse XML parser for the Eclipse IDE versions 2017.2.5 and earlier was found vulnerable to an XML External Entity attack. An attacker can exploit the vulnerability by implementing malicious code on Androidmanifest.xml.","status":"published","published":"2018-04-20T19:29:00Z","modified":"2025-10-24T04:46:18Z","cvss":[{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high"}],"updated_at":"2026-11-02T15:54:15.773974Z"}]}}