Back to search
CVE-2012-1148
Published: Jul 3, 2012
Modified: Aug 6, 2024
PUBLISHED
Description
Memory leak in the poolGrow function in expat/lib/xmlparse.c in expat before 2.1.0 allows context-dependent attackers to cause a denial of service (memory consumption) via a large number of crafted XML files that cause improperly-handled reallocation failures when expanding entities.
| Vendor | Product | Versions |
|---|---|---|
n/a | n/a | affected n/a |
References
49504
third-party-advisory
x_refsource_SECUNIA
USN-1527-1
vendor-advisory
x_refsource_UBUNTU
https://support.apple.com/HT205637
x_refsource_CONFIRM
1034344
vdb-entry
x_refsource_SECTRACK
51040
third-party-advisory
x_refsource_SECUNIA
RHSA-2012:0731
vendor-advisory
x_refsource_REDHAT
52379
vdb-entry
x_refsource_BID
http://sourceforge.net/projects/expat/files/expat/2.1.0/
x_refsource_CONFIRM
RHSA-2016:0062
vendor-advisory
x_refsource_REDHAT
APPLE-SA-2015-12-08-3
vendor-advisory
x_refsource_APPLE
DSA-2525
vendor-advisory
x_refsource_DEBIAN
MDVSA-2012:041
vendor-advisory
x_refsource_MANDRIVA
RHSA-2016:2957
vendor-advisory
x_refsource_REDHAT
USN-1613-2
vendor-advisory
x_refsource_UBUNTU
51024
third-party-advisory
x_refsource_SECUNIA
USN-1613-1
vendor-advisory
x_refsource_UBUNTU
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now