CVEvulnerability

CVE-2012-1147

4.3 MEDIUM Published 2012-07-03 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2012-07-03
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:N/A:P
Weaknesses
CWE-20

Description

readfilemap.c in expat before 2.1.0 allows context-dependent attackers to cause a denial of service (file descriptor consumption) via a large number of crafted XML files.

Affected configurations

• apple mac os x 10.11.0 • apple mac os x 10.11.1 • libexpat project libexpat (<= 2.0.1) • libexpat project libexpat 1.95.1 • libexpat project libexpat 1.95.2 • libexpat project libexpat 1.95.4 • libexpat project libexpat 1.95.5 • libexpat project libexpat 1.95.6 • libexpat project libexpat 1.95.7 • libexpat project libexpat 1.95.8 • libexpat project libexpat 2.0.0

Related

Weakness · CWE (1)

  • CWE-20 Improper Input Validation weakness

References