« Volver al listado

CVE-2012-1147

Estado: ModificadaMedia (4.3)—

readfilemap.c in expat before 2.1.0 allows context-dependent attackers to cause a denial of service (file descriptor consumption) via a large number of crafted XML files.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (2)

Apple — MAC OS XLibexpat Project — Libexpat

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2012-1147",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 4.3,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:M/Au:N/C:N/I:N/A:P",
          "authentication": "NONE",
          "integrityImpact": "NONE",
          "accessComplexity": "MEDIUM",
          "availabilityImpact": "PARTIAL",
          "confidentialityImpact": "NONE"
        },
        "acInsufInfo": false,
        "impactScore": 2.9,
        "baseSeverity": "MEDIUM",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 8.6,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": true
      }
    ]
  },
  "affected": [
    {
      "source": "secalert@redhat.com",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2012-07-03T19:55:02.663",
  "references": [
    {
      "url": "http://expat.cvs.sourceforge.net/viewvc/expat/expat/xmlwf/readfilemap.c?r1=1.14&r2=1.15",
      "source": "secalert@redhat.com"
    },
    {
      "url": "http://lists.apple.com/archives/security-announce/2015/Dec/msg00005.html",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "secalert@redhat.com"
    },
    {
      "url": "http://sourceforge.net/projects/expat/files/expat/2.1.0/",
      "source": "secalert@redhat.com"
    },
    {
      "url": "http://sourceforge.net/tracker/?func=detail&aid=2895533&group_id=10127&atid=110127",
      "source": "secalert@redhat.com"
    },
    {
      "url": "http://trac.wxwidgets.org/ticket/11194",
      "source": "secalert@redhat.com"
    },
    {
      "url": "http://trac.wxwidgets.org/ticket/11432",
      "source": "secalert@redhat.com"
    },
    {
      "url": "http://www.securityfocus.com/bid/52379",
      "source": "secalert@redhat.com"
    },
    {
      "url": "http://www.securitytracker.com/id/1034344",
      "source": "secalert@redhat.com"
    },
    {
      "url": "https://support.apple.com/HT205637",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "secalert@redhat.com"
    },
    {
      "url": "http://expat.cvs.sourceforge.net/viewvc/expat/expat/xmlwf/readfilemap.c?r1=1.14&r2=1.15",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://lists.apple.com/archives/security-announce/2015/Dec/msg00005.html",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://sourceforge.net/projects/expat/files/expat/2.1.0/",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://sourceforge.net/tracker/?func=detail&aid=2895533&group_id=10127&atid=110127",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://trac.wxwidgets.org/ticket/11194",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://trac.wxwidgets.org/ticket/11432",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securityfocus.com/bid/52379",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securitytracker.com/id/1034344",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://support.apple.com/HT205637",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-20"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "readfilemap.c in expat before 2.1.0 allows context-dependent attackers to cause a denial of service (file descriptor consumption) via a large number of crafted XML files."
    },
    {
      "lang": "es",
      "value": "readfilemap.c en expat antes de v2.1.0 permite causar una denegación de servicio (por consumo de descriptores de fichero) a atacantes dependientes de contexto a través de un gran número de archivos XML hechos a mano."
    }
  ],
  "lastModified": "2026-06-16T23:39:07.777",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:apple:mac_os_x:10.11.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "EDDDDC59-E784-4C8B-BDAD-55D8322138EC"
            },
            {
              "criteria": "cpe:2.3:o:apple:mac_os_x:10.11.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "751EE7FE-D5C1-403A-AA93-B9B8BD53953F"
            }
          ],
          "operator": "OR"
        }
      ]
    },
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:libexpat_project:libexpat:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "0B298040-6E60-4701-9F0A-E57CDD3CFA83",
              "versionEndIncluding": "2.0.1"
            },
            {
              "criteria": "cpe:2.3:a:libexpat_project:libexpat:1.95.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "055C8DC2-8840-4758-9F3F-21EEF87845DF"
            },
            {
              "criteria": "cpe:2.3:a:libexpat_project:libexpat:1.95.2:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "64E471EF-41A9-491F-B032-568723816ADD"
            },
            {
              "criteria": "cpe:2.3:a:libexpat_project:libexpat:1.95.4:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "D9F94DC5-6A6C-4DB4-A6FA-CDF786AC8E0B"
            },
            {
              "criteria": "cpe:2.3:a:libexpat_project:libexpat:1.95.5:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "19EC2420-0140-4233-A766-8D3D9B0933B8"
            },
            {
              "criteria": "cpe:2.3:a:libexpat_project:libexpat:1.95.6:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "572CC266-7C6B-46FE-963F-B457A387B24A"
            },
            {
              "criteria": "cpe:2.3:a:libexpat_project:libexpat:1.95.7:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "6B354846-9F53-4D07-B34E-F8BB63836299"
            },
            {
              "criteria": "cpe:2.3:a:libexpat_project:libexpat:1.95.8:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "E0B6B5BF-5A76-46B9-BD7B-679F28821CD7"
            },
            {
              "criteria": "cpe:2.3:a:libexpat_project:libexpat:2.0.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "843ADBBB-69DE-4128-A1B0-BCA3E85DC6BA"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "secalert@redhat.com"
}