Unscored severity · published Jul 3, 2012
CVE-2012-1147
readfilemap.c in expat before 2.1.0 allows context-dependent attackers to cause a denial of service (file descriptor consumption) via a large number of crafted XML files
–
CVSS
2.6%
EPSS
No
On KEV
Description
readfilemap.c in expat before 2.1.0 allows context-dependent attackers to cause a denial of service (file descriptor consumption) via a large number of crafted XML files.
Exploitation
Is it being used?
Exploit prediction (EPSS)2.6% · higher than 85% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
LI
Libexpat · Libexpat Project
through 2.0.1; 1.95.1; 1.95.2; 1.95.4; 1.95.5; 1.95.6; +3 more · source: NVD
MO
Mac OS X · Apple
10.11.0; 10.11.1 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2012-1147
CVE.org
https://www.cve.org/CVERecord?id=CVE-2012-1147
expat.cvs.sourceforge.net
http://expat.cvs.sourceforge.net/viewvc/expat/expat/xmlwf/readfilemap.c?r1=1.14&r2=1.15
Vendor Advisory
http://lists.apple.com/archives/security-announce/2015/Dec/msg00005.html
sourceforge.net
http://sourceforge.net/projects/expat/files/expat/2.1.0/
sourceforge.net
http://sourceforge.net/tracker/?func=detail&aid=2895533&group_id=10127&atid=110127
trac.wxwidgets.org
http://trac.wxwidgets.org/ticket/11194
trac.wxwidgets.org
http://trac.wxwidgets.org/ticket/11432
More from Mac OS X
9.8
CVE-2021-1871
Apple iOS, iPadOS, and macOS WebKit Remote Code Execution Vulnerability
9.8
CVE-2021-1870
Apple iOS, iPadOS, and macOS WebKit Remote Code Execution Vulnerability
9.8
CVE-2012-1823
PHP-CGI Query String Parameter Vulnerability
8.8
CVE-2022-2294
WebRTC Heap Buffer Overflow Vulnerability
8.8
CVE-2021-1789
Apple Multiple Products Type Confusion Vulnerability