CVE-2012-6532 in Zend Framework

Resumen (Inglés)

(1) Zend_Dom, (2) Zend_Feed, (3) Zend_Soap, and (4) Zend_XmlRpc in Zend Framework 1.x before 1.11.13 and 1.12.x before 1.12.0 allow remote attackers to cause a denial of service (CPU consumption) via recursive or circular references in an XML entity definition in an XML DOCTYPE declaration, aka an XML Entity Expansion (XEE) attack.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

Reservar

2013-02-13

Divulgación

2013-02-13

Estado

Confirmado

Voces

VulDB provides additional information and datapoints for this CVE:

ID	Vulnerabilidad	CWE	Exp	Con	CVE
63565	Zend Zend Framework denegación de servicio	399	No está definido	Arreglo oficial	CVE-2012-6532

Fuentes

• MITRE
• NVD
• CVE Details