Expat XML Parser hash conflict Remote Denial of Service Vulnerability

Release date:
Updated on: 2012-11-19

Affected Systems:
Sourceforge expat <2.1.0
Description:
--------------------------------------------------------------------------------
Cve id: CVE-2012-0876

Expat is an XML Parser library written in C language.

In versions earlier than Expat 2.1.0, the XML Parser (xmlparse. c) has a hash conflict vulnerability, which allows attackers to cause DOS through XML files with the same value.

<* Source: vendor

Link: http://secunia.com/advisories/51317/
*>

Suggestion:
--------------------------------------------------------------------------------
Vendor patch:

Sourceforge
-----------
The vendor has released a patch to fix this security problem. Please download it from the vendor's homepage:

Http://mod-security.svn.sourceforge.net