CVE-2012-1147
readfilemap.c in expat before 2.1.0 allows context-dependent attackers to cause a denial of...
4.3 MediumFix available
readfilemap.c in expat before 2.1.0 allows context-dependent attackers to cause a denial of service (file descriptor consumption) via a large number of crafted XML files.
Exploit likelihood
2.57%Up 1.0 points since Feb 4, 2022
What each source reports
NVD Score used
readfilemap.c in expat before 2.1.0 allows context-dependent attackers to cause a denial of service (file descriptor consumption) via a large number of crafted XML files.
- Record
CVE-2012-1147- CVSS 2.0
- 4.3 Medium
AV:N/AC:M/Au:N/C:N/I:N/A:P - Weakness
- CWE-20
- Updated
- 2026-11-02
CVE List No score
readfilemap.c in expat before 2.1.0 allows context-dependent attackers to cause a denial of service (file descriptor consumption) via a large number of crafted XML files.
- Record
CVE-2012-1147- Updated
- 2026-11-02
EUVDEUVD-2012-1181 No score
readfilemap.c in expat before 2.1.0 allows context-dependent attackers to cause a denial of service (file descriptor consumption) via a large number of crafted XML files.
- Record
EUVD-2012-1181- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-c8m9-hqfc-w4mm No score
readfilemap.c in expat before 2.1.0 allows context-dependent attackers to cause a denial of...
readfilemap.c in expat before 2.1.0 allows context-dependent attackers to cause a denial of service (file descriptor consumption) via a large number of crafted XML files.
- Record
GHSA-c8m9-hqfc-w4mm- Weakness
- CWE-20
- Updated
- 2026-11-02
OSVAZL-45093 No score
CVE-2012-1147 affecting package xmlrpc-c 1.60.04-4
readfilemap.c in expat before 2.1.0 allows context-dependent attackers to cause a denial of service (file descriptor consumption) via a large number of crafted XML files.
- Record
AZL-45093- Updated
- 2026-11-05
OSV No score
readfilemap.c in expat before 2.1.0 allows context-dependent attackers to cause a denial of service (file descriptor consumption) via a large number of crafted XML files.
- Record
CVE-2012-1147- Updated
- 2026-11-02
OSVDEBIAN-CVE-2012-1147 No score
readfilemap.c in expat before 2.1.0 allows context-dependent attackers to cause a denial of service (file descriptor consumption) via a large number of crafted XML files.
- Record
DEBIAN-CVE-2012-1147- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:10077-1 No score
expat-2.2.0-3.1 on GA media
These are all security issues fixed in the expat-2.2.0-3.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:10077-1- Updated
- 2026-11-02
OSVUBUNTU-CVE-2012-1147 No score
readfilemap.c in expat before 2.1.0 allows context-dependent attackers to cause a denial of service (file descriptor consumption) via a large number of crafted XML files.
- Record
UBUNTU-CVE-2012-1147- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
xmlrpc-cAzure Linux:3 |
through 1.60.04-4 | None known |
libxmltokDebian:12 |
All versions, plus listed versions 1.2-41.2-4.11.2-4.1~exp11.2-4.2 |
None known |
apache2Ubuntu:Pro:14.04:LTS |
All versions, plus listed versions 2.4.6-2ubuntu22.4.6-2ubuntu32.4.6-2ubuntu42.4.7-1ubuntu12.4.7-1ubuntu2 Show 35 moreShow less2.4.7-1ubuntu32.4.7-1ubuntu42.4.7-1ubuntu4.12.4.7-1ubuntu4.42.4.7-1ubuntu4.52.4.7-1ubuntu4.62.4.7-1ubuntu4.72.4.7-1ubuntu4.82.4.7-1ubuntu4.92.4.7-1ubuntu4.102.4.7-1ubuntu4.112.4.7-1ubuntu4.132.4.7-1ubuntu4.152.4.7-1ubuntu4.162.4.7-1ubuntu4.172.4.7-1ubuntu4.182.4.7-1ubuntu4.192.4.7-1ubuntu4.202.4.7-1ubuntu4.212.4.7-1ubuntu4.222.4.7-1ubuntu4.22+esm12.4.7-1ubuntu4.22+esm22.4.7-1ubuntu4.22+esm32.4.7-1ubuntu4.22+esm42.4.7-1ubuntu4.22+esm52.4.7-1ubuntu4.22+esm62.4.7-1ubuntu4.22+esm82.4.7-1ubuntu4.22+esm92.4.7-1ubuntu4.22+esm102.4.7-1ubuntu4.22+esm122.4.7-1ubuntu4.22+esm132.4.7-1ubuntu4.22+esm142.4.7-1ubuntu4.22+esm152.4.7-1ubuntu4.22+esm162.4.7-1ubuntu4.22+esm17 |
None known |
apr-utilUbuntu:Pro:14.04:LTS |
All versions, plus listed versions 1.5.2-11.5.2-1build11.5.2-2ubuntu11.5.3-11.5.3-1ubuntu0.1~esm11.5.3-1ubuntu0.1~esm21.5.3-1ubuntu0.1~esm3 |
None known |
vnc4Ubuntu:Pro:14.04:LTS |
All versions, plus listed versions 4.1.1+xorg4.3.0-37ubuntu54.1.1+xorg4.3.0-37ubuntu5.0.14.1.1+xorg4.3.0-37ubuntu5.0.24.1.1+xorg4.3.0-37ubuntu5.0.2+esm1 |
None known |
xmlrpc-cUbuntu:Pro:14.04:LTS |
All versions, plus listed versions 1.16.33-3.2ubuntu31.33.06-0ubuntu11.33.06-0ubuntu1+esm1 |
None known |
apache2Ubuntu:Pro:16.04:LTS |
All versions, plus listed versions 2.4.12-2ubuntu22.4.17-1ubuntu12.4.17-2ubuntu12.4.17-3ubuntu12.4.18-1ubuntu1 Show 38 moreShow less2.4.18-2ubuntu12.4.18-2ubuntu22.4.18-2ubuntu32.4.18-2ubuntu3.12.4.18-2ubuntu3.22.4.18-2ubuntu3.32.4.18-2ubuntu3.42.4.18-2ubuntu3.52.4.18-2ubuntu3.72.4.18-2ubuntu3.82.4.18-2ubuntu3.92.4.18-2ubuntu3.102.4.18-2ubuntu3.122.4.18-2ubuntu3.132.4.18-2ubuntu3.142.4.18-2ubuntu3.152.4.18-2ubuntu3.172.4.18-2ubuntu3.17+esm12.4.18-2ubuntu3.17+esm22.4.18-2ubuntu3.17+esm32.4.18-2ubuntu3.17+esm42.4.18-2ubuntu3.17+esm52.4.18-2ubuntu3.17+esm62.4.18-2ubuntu3.17+esm72.4.18-2ubuntu3.17+esm82.4.18-2ubuntu3.17+esm92.4.18-2ubuntu3.17+esm102.4.18-2ubuntu3.17+esm112.4.18-2ubuntu3.17+esm122.4.18-2ubuntu3.17+esm132.4.18-2ubuntu3.17+esm142.4.18-2ubuntu3.17+esm162.4.18-2ubuntu3.17+esm172.4.18-2ubuntu3.17+esm182.4.18-2ubuntu3.17+esm192.4.18-2ubuntu3.17+esm202.4.18-2ubuntu3.17+esm212.4.18-2ubuntu3.17+esm22 |
None known |
apr-utilUbuntu:Pro:16.04:LTS |
All versions, plus listed versions 1.5.4-11.5.4-1build11.5.4-1ubuntu0.1~esm11.5.4-1ubuntu0.1~esm2 |
None known |
cmakeUbuntu:16.04:LTS |
All versions, plus listed versions 3.2.2-2ubuntu33.2.2-2ubuntu43.3.2-1ubuntu13.3.2is3.2.2-0ubuntu13.3.2is3.2.2-0ubuntu2 Show 8 moreShow less3.3.2is3.2.2-0ubuntu43.3.2is3.2.2-0ubuntu53.5.0-1ubuntu13.5.0-1ubuntu23.5.0-1ubuntu33.5.1-1ubuntu13.5.1-1ubuntu23.5.1-1ubuntu3 |
None known |
ghostscriptUbuntu:Pro:16.04:LTS |
All versions, plus listed versions 9.16~dfsg~0-0ubuntu39.16~dfsg~0-0ubuntu49.18~dfsg~0-0ubuntu19.18~dfsg~0-0ubuntu29.18~dfsg~0-0ubuntu2.2 Show 33 moreShow less9.18~dfsg~0-0ubuntu2.39.18~dfsg~0-0ubuntu2.49.18~dfsg~0-0ubuntu2.69.18~dfsg~0-0ubuntu2.79.18~dfsg~0-0ubuntu2.89.18~dfsg~0-0ubuntu2.99.25~dfsg+1-0ubuntu0.16.04.19.25~dfsg+1-0ubuntu0.16.04.29.25~dfsg+1-0ubuntu0.16.04.39.26~dfsg+0-0ubuntu0.16.04.19.26~dfsg+0-0ubuntu0.16.04.39.26~dfsg+0-0ubuntu0.16.04.49.26~dfsg+0-0ubuntu0.16.04.59.26~dfsg+0-0ubuntu0.16.04.69.26~dfsg+0-0ubuntu0.16.04.79.26~dfsg+0-0ubuntu0.16.04.89.26~dfsg+0-0ubuntu0.16.04.99.26~dfsg+0-0ubuntu0.16.04.109.26~dfsg+0-0ubuntu0.16.04.119.26~dfsg+0-0ubuntu0.16.04.129.26~dfsg+0-0ubuntu0.16.04.139.26~dfsg+0-0ubuntu0.16.04.149.26~dfsg+0-0ubuntu0.16.04.14+esm19.26~dfsg+0-0ubuntu0.16.04.14+esm29.26~dfsg+0-0ubuntu0.16.04.14+esm39.26~dfsg+0-0ubuntu0.16.04.14+esm49.26~dfsg+0-0ubuntu0.16.04.14+esm59.26~dfsg+0-0ubuntu0.16.04.14+esm69.26~dfsg+0-0ubuntu0.16.04.14+esm79.26~dfsg+0-0ubuntu0.16.04.14+esm89.26~dfsg+0-0ubuntu0.16.04.14+esm99.26~dfsg+0-0ubuntu0.16.04.14+esm109.26~dfsg+0-0ubuntu0.16.04.14+esm11 |
None known |
Show 13 moreShow less
| Package | Affected | Fixed |
|---|---|---|
texlive-binUbuntu:Pro:16.04:LTS |
All versions, plus listed versions 2015.20150524.37493-5build12015.20150524.37493-72015.20150524.37493-7build12015.20150524.37493-7build42015.20160222.37495-12015.20160222.37495-1ubuntu0.12015.20160222.37495-1ubuntu0.1+esm1 |
None known |
smartUbuntu:16.04:LTS |
All versions, plus listed versions 1.4-2 |
None known |
vnc4Ubuntu:Pro:16.04:LTS |
All versions, plus listed versions 4.1.1+xorg4.3.0-37.3ubuntu24.1.1+xorg4.3.0-37.3ubuntu2.1+esm1 |
None known |
xmlrpc-cUbuntu:Pro:16.04:LTS |
All versions, plus listed versions 1.33.14-0.2ubuntu31.33.14-1ubuntu11.33.14-1ubuntu1+esm1 |
None known |
apache2Ubuntu:Pro:18.04:LTS |
All versions, plus listed versions 2.4.27-2ubuntu32.4.29-1ubuntu12.4.29-1ubuntu22.4.29-1ubuntu32.4.29-1ubuntu4 Show 37 moreShow less2.4.29-1ubuntu4.12.4.29-1ubuntu4.22.4.29-1ubuntu4.32.4.29-1ubuntu4.42.4.29-1ubuntu4.52.4.29-1ubuntu4.62.4.29-1ubuntu4.72.4.29-1ubuntu4.82.4.29-1ubuntu4.102.4.29-1ubuntu4.112.4.29-1ubuntu4.122.4.29-1ubuntu4.132.4.29-1ubuntu4.142.4.29-1ubuntu4.162.4.29-1ubuntu4.172.4.29-1ubuntu4.182.4.29-1ubuntu4.192.4.29-1ubuntu4.202.4.29-1ubuntu4.212.4.29-1ubuntu4.222.4.29-1ubuntu4.232.4.29-1ubuntu4.242.4.29-1ubuntu4.252.4.29-1ubuntu4.262.4.29-1ubuntu4.272.4.29-1ubuntu4.27+esm12.4.29-1ubuntu4.27+esm22.4.29-1ubuntu4.27+esm32.4.29-1ubuntu4.27+esm42.4.29-1ubuntu4.27+esm62.4.29-1ubuntu4.27+esm72.4.29-1ubuntu4.27+esm82.4.29-1ubuntu4.27+esm92.4.29-1ubuntu4.27+esm102.4.29-1ubuntu4.27+esm112.4.29-1ubuntu4.27+esm122.4.29-1ubuntu4.27+esm13 |
None known |
apr-utilUbuntu:Pro:18.04:LTS |
All versions, plus listed versions 1.6.0-21.6.1-11.6.1-1ubuntu21.6.1-21.6.1-2ubuntu0.11.6.1-2ubuntu0.1+esm1 |
None known |
cmakeUbuntu:18.04:LTS |
All versions, plus listed versions 3.9.1-13.9.3-13.9.5-13.10.2-13.10.2-1build1 Show 4 moreShow less3.10.2-1ubuntu13.10.2-1ubuntu23.10.2-1ubuntu2.18.04.13.10.2-1ubuntu2.18.04.2 |
None known |
ghostscriptUbuntu:Pro:18.04:LTS |
All versions, plus listed versions 9.21~dfsg+1-0ubuntu39.22~dfsg+1-0ubuntu19.22~dfsg+1-0ubuntu1.19.22~dfsg+1-0ubuntu1.29.25~dfsg+1-0ubuntu0.18.04.1 Show 24 moreShow less9.25~dfsg+1-0ubuntu0.18.04.29.26~dfsg+0-0ubuntu0.18.04.19.26~dfsg+0-0ubuntu0.18.04.39.26~dfsg+0-0ubuntu0.18.04.49.26~dfsg+0-0ubuntu0.18.04.59.26~dfsg+0-0ubuntu0.18.04.69.26~dfsg+0-0ubuntu0.18.04.79.26~dfsg+0-0ubuntu0.18.04.89.26~dfsg+0-0ubuntu0.18.04.99.26~dfsg+0-0ubuntu0.18.04.109.26~dfsg+0-0ubuntu0.18.04.119.26~dfsg+0-0ubuntu0.18.04.129.26~dfsg+0-0ubuntu0.18.04.139.26~dfsg+0-0ubuntu0.18.04.149.26~dfsg+0-0ubuntu0.18.04.159.26~dfsg+0-0ubuntu0.18.04.169.26~dfsg+0-0ubuntu0.18.04.179.26~dfsg+0-0ubuntu0.18.04.189.26~dfsg+0-0ubuntu0.18.04.18+esm19.26~dfsg+0-0ubuntu0.18.04.18+esm29.26~dfsg+0-0ubuntu0.18.04.18+esm39.26~dfsg+0-0ubuntu0.18.04.18+esm49.26~dfsg+0-0ubuntu0.18.04.18+esm59.26~dfsg+0-0ubuntu0.18.04.18+esm6 |
None known |
texlive-binUbuntu:Pro:18.04:LTS |
All versions, plus listed versions 2017.20170613.44572-5build12017.20170613.44572-5build22017.20170613.44572-62017.20170613.44572-6build12017.20170613.44572-6ubuntu1 Show 4 moreShow less2017.20170613.44572-8build12017.20170613.44572-8ubuntu0.12017.20170613.44572-8ubuntu0.22017.20170613.44572-8ubuntu0.2+esm1 |
None known |
smartUbuntu:18.04:LTS |
All versions, plus listed versions 1.4-2 |
None known |
vnc4Ubuntu:18.04:LTS |
All versions, plus listed versions 4.1.1+xorg4.3.0-37.3ubuntu2 |
None known |
xmlrpc-cUbuntu:Pro:18.04:LTS |
All versions, plus listed versions 1.33.14-71.33.14-81.33.14-8build11.33.14-8ubuntu0.18.04.1~esm1 |
None known |
expatopenSUSE:Tumbleweed |
before 2.2.0-3.1 | 2.2.0-3.1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| facts | OSV | |
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2012-1147 is a medium vulnerability (CVSS 4.3) in Apple Mac Os X, published July 3, 2012. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.57%, the 85th percentile. Fixed in expat 2.2.0-3.1.
References
support.apple.com/HT205637
securitytracker.com/id/1034344
securityfocus.com/bid/52379
sourceforge.net/projects/expat/files/expat/2.1.0
expat.cvs.sourceforge.net/viewvc/expat/expat/xmlwf/readfilemap.c?r1=1.14&r2=1.15
lists.apple.com/archives/security-announce/2015/Dec/msg00005.html
Show 20 moreShow less
trac.wxwidgets.org/ticket/11432
nvd.nist.gov/vuln/detail/CVE-2012-1147
github.com/advisories/GHSA-c8m9-hqfc-w4mm
security-tracker.debian.org/tracker/CVE-2012-1147
ubuntu.com/security/CVE-2012-1147
mail.python.org/pipermail/expat-bugs/2009-November/002858.html
cve.org/CVERecord?id=CVE-2012-1147
suse.com/security/cve/CVE-2009-2625