CVE-2012-2921

Universal Feed Parser (aka feedparser or python-feedparser) before 5.1.2 allows remote attackers to cause a denial of service (memory consumption) via a crafted XML ENTITY declaration in a non-ASCII encoded document.

Affected Software

Name	Vendor	Start Version	End Version
Feedparser	Mark_pilgrim	*	5.1.1 (including)
Feedparser	Mark_pilgrim	3.0 (including)	3.0 (including)
Feedparser	Mark_pilgrim	3.0.1 (including)	3.0.1 (including)
Feedparser	Mark_pilgrim	3.1 (including)	3.1 (including)
Feedparser	Mark_pilgrim	3.2 (including)	3.2 (including)
Feedparser	Mark_pilgrim	3.3 (including)	3.3 (including)
Feedparser	Mark_pilgrim	4.0 (including)	4.0 (including)
Feedparser	Mark_pilgrim	4.0.1 (including)	4.0.1 (including)
Feedparser	Mark_pilgrim	4.0.2 (including)	4.0.2 (including)
Feedparser	Mark_pilgrim	4.1 (including)	4.1 (including)
Feedparser	Mark_pilgrim	5.0 (including)	5.0 (including)
Feedparser	Mark_pilgrim	5.0.1 (including)	5.0.1 (including)
Feedparser	Mark_pilgrim	5.1 (including)	5.1 (including)
Feedparser	Mark_pilgrim	5.1.2 (including)	5.1.2 (including)
Feedparser	Ubuntu	devel	*
Feedparser	Ubuntu	hardy	*
Feedparser	Ubuntu	lucid	*
Feedparser	Ubuntu	natty	*
Feedparser	Ubuntu	oneiric	*
Feedparser	Ubuntu	precise	*
Feedparser	Ubuntu	quantal	*
Feedparser	Ubuntu	raring	*
Feedparser	Ubuntu	saucy	*
Feedparser	Ubuntu	upstream	*

NVD	https://nvd.nist.gov/vuln/detail/CVE-2012-2921
CWE	https://cwe.mitre.org/data/definitions/399.html

Affected Software

References