Oval Definition:oval:com.ubuntu.precise:def:20125657000
Revision Date:2013-05-02Version:1
Title:CVE-2012-5657 on Ubuntu 12.04 LTS (precise) - medium.
Description:The (1) Zend_Feed_Rss and (2) Zend_Feed_Atom classes in Zend_Feed in Zend Framework 1.11.x before 1.11.15 and 1.12.x before 1.12.1 allow remote attackers to read arbitrary files, send HTTP requests to intranet servers, and possibly cause a denial of service (CPU and memory consumption) via an XML External Entity (XXE) attack.
Family:unixClass:vulnerability
Status:Reference(s):CVE-2012-5657
Platform(s):Ubuntu 12.04 LTS
Product(s):
Definition Synopsis
  • Ubuntu 12.04 LTS (precise) is installed.
  • AND The 'zend-framework' package in precise is affected and needs fixing.
    • BACK