|
|
| |
|
| |
php-ZendFramework: denial of service
| Package(s): | php-ZendFramework |
CVE #(s): | CVE-2012-5657
|
| Created: | December 28, 2012 |
Updated: | January 21, 2013 |
| Description: |
From the Mageia advisory:
A vulnerability was reported in Zend Framework versions prior to 1.11.15
and 1.12.1, which can be exploited to disclose certain sensitive
information. This flaw is caused due to an error in the "Zend_Feed_Rss"
and "Zend_Feed_Atom" classes of the "Zend_Feed" component, when
processing XML data. It can be used to disclose the contents of certain
local files by sending specially crafted XML data including external
entity references. |
| Alerts: |
|
( Log in to post comments)
|
|
|