SecuritySpace - CVE-2012-6532

Vulnerability Search		Search 324607 CVE descriptions and 145615 test descriptions, access 10,000+ cross references.
	Tests CVE All

CVE ID: CVE-2012-6532

Description: (1) Zend_Dom, (2) Zend_Feed, (3) Zend_Soap, and (4) Zend_XmlRpc in Zend Framework 1.x before 1.11.13 and 1.12.x before 1.12.0 allow remote attackers to cause a denial of service (CPU consumption) via recursive or circular references in an XML entity definition in an XML DOCTYPE declaration, aka an XML Entity Expansion (XEE) attack.

Test IDs: 1.3.6.1.4.1.25623.1.1.1.2.2015.251

Cross References: Common Vulnerability Exposure (CVE) ID: CVE-2012-6532
http://www.mandriva.com/security/advisories?name=MDVSA-2013:115

CVE ID:	CVE-2012-6532
Description:	(1) Zend_Dom, (2) Zend_Feed, (3) Zend_Soap, and (4) Zend_XmlRpc in Zend Framework 1.x before 1.11.13 and 1.12.x before 1.12.0 allow remote attackers to cause a denial of service (CPU consumption) via recursive or circular references in an XML entity definition in an XML DOCTYPE declaration, aka an XML Entity Expansion (XEE) attack.
Test IDs:	1.3.6.1.4.1.25623.1.1.1.2.2015.251
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2012-6532 http://www.mandriva.com/security/advisories?name=MDVSA-2013:115