CVE:CVE-2019-9656
CNNVD:CNNVD-201903-321
LibOFX是一款允许程序支持OFX（财务数据双向交换）命令响应的库。
LibOFX 0.9.14版本中的lib/ofx_sgml.cpp文件的‘OFXApplication::startElement’函数存在空指针逆向引用漏洞。目前尚无此漏洞的相关信息，请随时关注CNNVD或厂商公告。
solution:Upgrade libofx_project libofx to a higher version than 0.9.14,and avoid the version 0.9.14; Upgrade debian debian_linux to a higher version than 8.0,and avoid the version 8.0; Upgrade canonical ubuntu_linux to a higher version than 16.04,and avoid the version 16.04