CVE-2012-6532 in Zend Framework

摘要 (英语)

(1) Zend_Dom, (2) Zend_Feed, (3) Zend_Soap, and (4) Zend_XmlRpc in Zend Framework 1.x before 1.11.13 and 1.12.x before 1.12.0 allow remote attackers to cause a denial of service (CPU consumption) via recursive or circular references in an XML entity definition in an XML DOCTYPE declaration, aka an XML Entity Expansion (XEE) attack.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

预定

2013-02-13

披露

2013-02-13

状态

已确认

条目

VulDB provides additional information and datapoints for this CVE:

标识符	漏洞	CWE	可利用	对策	CVE
63565	Zend Zend Framework 拒绝服务	399	未定义	官方修复	CVE-2012-6532

来源

• MITRE
• NVD
• CVE Details