BZ 954228 - Security review: Xerces vulnerable to CVE-2009-2625