Files
CVEs-PoC/2012/CVE-2012-0876.md
2025-09-29 21:09:30 +02:00

1.0 KiB

CVE-2012-0876

Description

The XML parser (xmlparse.c) in expat before 2.1.0 computes hash values without restricting the ability to trigger hash collisions predictably, which allows context-dependent attackers to cause a denial of service (CPU consumption) via an XML file with many identifiers with the same value.

POC

Reference

Github

No PoCs found on GitHub currently.