CVE-2012-0876 in Apple Mac OS X

Summary

The XML parser (xmlparse.c) in expat before 2.1.0 computes hash values without restricting the ability to trigger hash collisions predictably, which allows context-dependent attackers to cause a denial of service (CPU consumption) via an XML file with many identifiers with the same value.

Reservation

01/19/2012

Disclosure

07/03/2012

Entries

VulDB provides additional information and datapoints for this CVE:

ID	Vulnerability	CWE	Exp	Cou	CVE
79574	Apple Mac OS X libexpat resource management	399	Not defined	Official fix	CVE-2012-0876
10938	Apple Mac OS X Python resource management	399	Not defined	Official fix	CVE-2012-0876
10933	Apple Mac OS X Python resource management	399	Not defined	Official fix	CVE-2012-0876