cve/2012/CVE-2012-0841.md

CVE-2012-0841

Description

libxml2 before 2.8.0 computes hash values without restricting the ability to trigger hash collisions predictably, which allows context-dependent attackers to cause a denial of service (CPU consumption) via crafted XML data.

POC

Reference

• http://www.mandriva.com/security/advisories?name=MDVSA-2013:150
• http://www.oracle.com/technetwork/topics/security/cpuapr2013-1899555.html

Github

• https://github.com/akaganeite/CVE4PP