CVE-2016-5300 in iTunesinfo

Zusammenfassung

von MITRE

The XML parser in Expat does not use sufficient entropy for hash initialization, which allows context-dependent attackers to cause a denial of service (CPU consumption) via crafted identifiers in an XML document. NOTE: this vulnerability exists because of an incomplete fix for CVE-2012-0876.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

🔬 Show More Details

An in-depth analysis is available in our curated vulnerability entry.

Reservieren

04.06.2016

Veröffentlichung

16.06.2016

Moderieren

akzeptiert

Eintrag

3

Verknüpfen

zeigen

CPE

bereit

EPSS

0.02202

KEV

nein

Aktivitäten

very low

Sektor

Police, Lawfirm, ...

Quellen

MITREhttps://www.cve.org/CVERecord?id=CVE-2016-5300
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2016-5300
CVE Detailshttps://www.cvedetails.com/cve/CVE-2016-5300/

◂ ZurückÜbersichtWeiter ▸

Do you want to use VulDB in your project?

Use the official API to access entries easily!