NetSight
IP …
medium5.0

CVE-2012-0841

libxml2 before 2.8.0 computes hash values without restricting the ability to trigger hash collisions predictably, which allows context-dependent attackers to c…

Impact

libxml2 before 2.8.0 computes hash values without restricting the ability to trigger hash collisions predictably, which allows context-dependent attackers to cause a denial of service (CPU consumption) via crafted XML data.

Affected products

VendorProductAffected versions
XmlsoftLibxml2
through 2.7.8
Versions 1.7.0, 1.7.1, 1.7.2, 1.7.3, 1.7.4
AppleIphone Os
through 6.1.4
Versions 1.0.0, 1.0.1, 1.0.2, 1.1.0, 1.1.1

Weakness classification

CWE-399

References