Description
readfilemap.c in expat before 2.1.0 allows context-dependent attackers to cause a denial of service (file descriptor consumption) via a large number of crafted XML files.
References (9)
Core 9
Core References
Vendor Advisory x_refsource_confirm
https://support.apple.com/HT205637
Third Party Advisory, VDB Entry vdb-entry
x_refsource_sectrack
http://www.securitytracker.com/id/1034344
Third Party Advisory, VDB Entry vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/52379
Product x_refsource_confirm
http://sourceforge.net/projects/expat/files/expat/2.1.0/
Product x_refsource_confirm
http://expat.cvs.sourceforge.net/viewvc/expat/expat/xmlwf/readfilemap.c?r1=1.14&r2=1.15
Vendor Advisory vendor-advisory
x_refsource_apple
http://lists.apple.com/archives/security-announce/2015/Dec/msg00005.html
Product x_refsource_confirm
http://sourceforge.net/tracker/?func=detail&aid=2895533&group_id=10127&atid=110127
Various Sources x_refsource_misc
http://trac.wxwidgets.org/ticket/11432
Various Sources x_refsource_misc
http://trac.wxwidgets.org/ticket/11194
Scores
EPSS
0.0257
EPSS Percentile
83.3%
Details
CWE
CWE-20
Status
published
Products (11)
apple/mac_os_x
10.11.0
apple/mac_os_x
10.11.1
libexpat_project/libexpat
1.95.1
libexpat_project/libexpat
1.95.2
libexpat_project/libexpat
1.95.4
libexpat_project/libexpat
1.95.5
libexpat_project/libexpat
1.95.6
libexpat_project/libexpat
1.95.7
libexpat_project/libexpat
1.95.8
libexpat_project/libexpat
2.0.0
... and 1 more
Published
Jul 03, 2012
Tracked Since
Feb 18, 2026