NVD

Id
43165  
Name
CVE-2012-1148  
Description
Memory leak in the poolGrow function in expat/lib/xmlparse.c in expat before 2.1.0 allows context-dependent attackers to cause a denial of service (memory consumption) via a large number of crafted XML files that cause improperly-handled reallocation failures when expanding entities.  
Reject
 
CVSS Version
2  
CVSS Score
5  
Severity
Medium  
CVSS Base Score
5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:N/I:N/A:P)  
Pub Date
2017-01-19  
Published
2012-07-03  
Modified Date
2016-12-05  
Seq
2012-1148  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
217243 43165 CVE-2012-1148 http://expat.cvs.sourceforge.net/viewvc/expat/expat/lib/xmlparse.c?r1=1.166&r2=1.167  View
217244 43165 CVE-2012-1148 APPLE-SA-2015-12-08-3  View
217245 43165 CVE-2012-1148 RHSA-2012:0731  View
217246 43165 CVE-2012-1148 RHSA-2016:0062  View
217247 43165 CVE-2012-1148 http://sourceforge.net/projects/expat/files/expat/2.1.0/  View
217248 43165 CVE-2012-1148 http://sourceforge.net/tracker/?func=detail&atid=110127&aid=2958794&group_id=10127  View
217249 43165 CVE-2012-1148 DSA-2525  View
217250 43165 CVE-2012-1148 MDVSA-2012:041  View
217251 43165 CVE-2012-1148 52379  View
217252 43165 CVE-2012-1148 USN-1527-1  View
217253 43165 CVE-2012-1148 USN-1613-1  View
217254 43165 CVE-2012-1148 USN-1613-2  View
217255 43165 CVE-2012-1148 https://support.apple.com/HT205637  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
27272 JVNDB-2012-002979 Expat の expat/lib/xmlparse.c におけるサービス運用妨害 (メモリ消費) の脆弱性 Expat の expat/lib/xmlparse.c 内の poolGrow 関数には、メモリリークの発生によって、サービス運用妨害 (メモリ消費) 状態となる脆弱性が存在します。 CVE-2012-1148 54386 CVE-2012-1148 43165 5 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-002979.html 2012-03-24 2015-12-15 View