CVE-2012-0876 in Apple Mac OS X

摘要 (英语)

The XML parser (xmlparse.c) in expat before 2.1.0 computes hash values without restricting the ability to trigger hash collisions predictably, which allows context-dependent attackers to cause a denial of service (CPU consumption) via an XML file with many identifiers with the same value.

预定

2012-01-19

披露

2012-07-03

条目

VulDB provides additional information and datapoints for this CVE:

标识符	漏洞	CWE	可利用	对策	CVE
79574	Apple Mac OS X libexpat 拒绝服务	399	未定义	官方修复	CVE-2012-0876
10938	Apple Mac OS X Python 拒绝服务	399	未定义	官方修复	CVE-2012-0876
10933	Apple Mac OS X Python 拒绝服务	399	未定义	官方修复	CVE-2012-0876