CVE-2012-1147: Input Validation
First published: Tue Jul 03 2012(Updated: )
readfilemap.c in expat before 2.1.0 allows context-dependent attackers to cause a denial of service (file descriptor consumption) via a large number of crafted XML files.
Credit: secalert@redhat.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Apple Mac OS X | =10.11.0 | |
| Apple Mac OS X | =10.11.1 | |
| Libexpat Project Libexpat | <=2.0.1 | |
| Libexpat Project Libexpat | =1.95.1 | |
| Libexpat Project Libexpat | =1.95.2 | |
| Libexpat Project Libexpat | =1.95.4 | |
| Libexpat Project Libexpat | =1.95.5 | |
| Libexpat Project Libexpat | =1.95.6 | |
| Libexpat Project Libexpat | =1.95.7 | |
| Libexpat Project Libexpat | =1.95.8 | |
| Libexpat Project Libexpat | =2.0.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://expat.cvs.sourceforge.net/viewvc/expat/expat/xmlwf/readfilemap.c?r1=1.14&r2=1.15
- http://lists.apple.com/archives/security-announce/2015/Dec/msg00005.html
- http://sourceforge.net/projects/expat/files/expat/2.1.0/
- http://sourceforge.net/tracker/?func=detail&aid=2895533&group_id=10127&atid=110127
- http://trac.wxwidgets.org/ticket/11194
- http://trac.wxwidgets.org/ticket/11432
- http://www.securityfocus.com/bid/52379
- http://www.securitytracker.com/id/1034344
- https://support.apple.com/HT205637
- collector/nvd-index
- agent/weakness
- agent/references
- agent/type
- agent/event
- agent/severity
- agent/author
- agent/description
- agent/tags
- agent/softwarecombine
- agent/last-modified-date
- agent/first-publish-date
- vendor/apple
- canonical/apple mac os x
- version/apple mac os x/10.11.0
- version/apple mac os x/10.11.1
- vendor/libexpat project
- canonical/libexpat project libexpat
- version/libexpat project libexpat/2.0.1
- version/libexpat project libexpat/1.95.1
- version/libexpat project libexpat/1.95.2
- version/libexpat project libexpat/1.95.4
- version/libexpat project libexpat/1.95.5
- version/libexpat project libexpat/1.95.6
- version/libexpat project libexpat/1.95.7
- version/libexpat project libexpat/1.95.8
- version/libexpat project libexpat/2.0.0