Unrated severityNVD Advisory· Published Jul 3, 2012· Updated Apr 29, 2026
CVE-2012-1147
CVE-2012-1147
Description
readfilemap.c in expat before 2.1.0 allows context-dependent attackers to cause a denial of service (file descriptor consumption) via a large number of crafted XML files.
Affected products
11cpe:2.3:a:libexpat_project:libexpat:*:*:*:*:*:*:*:*+ 8 more
- cpe:2.3:a:libexpat_project:libexpat:*:*:*:*:*:*:*:*range: <=2.0.1
- cpe:2.3:a:libexpat_project:libexpat:1.95.1:*:*:*:*:*:*:*
- cpe:2.3:a:libexpat_project:libexpat:1.95.2:*:*:*:*:*:*:*
- cpe:2.3:a:libexpat_project:libexpat:1.95.4:*:*:*:*:*:*:*
- cpe:2.3:a:libexpat_project:libexpat:1.95.5:*:*:*:*:*:*:*
- cpe:2.3:a:libexpat_project:libexpat:1.95.6:*:*:*:*:*:*:*
- cpe:2.3:a:libexpat_project:libexpat:1.95.7:*:*:*:*:*:*:*
- cpe:2.3:a:libexpat_project:libexpat:1.95.8:*:*:*:*:*:*:*
- cpe:2.3:a:libexpat_project:libexpat:2.0.0:*:*:*:*:*:*:*
cpe:2.3:o:apple:mac_os_x:10.11.0:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:apple:mac_os_x:10.11.0:*:*:*:*:*:*:*
- cpe:2.3:o:apple:mac_os_x:10.11.1:*:*:*:*:*:*:*
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
9- lists.apple.com/archives/security-announce/2015/Dec/msg00005.htmlnvdVendor Advisory
- support.apple.com/HT205637nvdVendor Advisory
- expat.cvs.sourceforge.net/viewvc/expat/expat/xmlwf/readfilemap.cnvd
- sourceforge.net/projects/expat/files/expat/2.1.0/nvd
- sourceforge.net/tracker/nvd
- trac.wxwidgets.org/ticket/11194nvd
- trac.wxwidgets.org/ticket/11432nvd
- www.securityfocus.com/bid/52379nvd
- www.securitytracker.com/id/1034344nvd
News mentions
0No linked articles in our index yet.