The XML parser in Xerces-C++ 2.5.0 allows remote attackers to cause a denial of service (CPU consumption) via XML attributes in a crafted XML document.
https://exchange.xforce.ibmcloud.com/vulnerabilities/17575
https://euvd.enisa.europa.eu/vulnerability/EUVD-2004-1569
http://www.securityfocus.com/bid/11312