Secunia Advisory – A problem lies in Sun Java where JAXP cannot handle XML documents with deeply nested entity definitions. This can be exploited to consume 100% CPU resources by users with access to Java based applications which accepts and parses XML documents.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/31684/secuniaJAXP.txt
Source: https://packetstormsecurity.com/files/31684/secuniaJAXP.txt.html