CVE:CVE-2012-0876
CNNVD:CNNVD-201204-165
Expat是美国软件开发者吉姆-克拉克所研发的一个基于C语言的XML解析器库，它采用了一个面向流的解析器。
Expat library 2.1.0之前版本中存在多个拒绝服务漏洞，这些漏洞源于未正确处理特制XML数据。远程攻击者可利用这些漏洞在使用受影响XML解析库的应用程序上下文中造成拒绝服务。
solution:Upgrade libexpat_project libexpat to a higher version than 2.1.0,and avoid the version (,2.1.0); Upgrade python python to a higher version than 2.6.8,2.7.3,3.1.5,3.2.3,and avoid the version [2.6.0,2.6.8),[2.7.0,2.7.3),[3.1.0,3.1.5),[3.2.0,3.2.3); Upgrade debian debian_linux to a higher version than 6.0,7.0,and avoid the version 6.0,7.0; Upgrade canonical ubuntu_linux to a higher version than 8.04,10.04,11.04,11.10,12.04,and avoid the version 8.04,10.04,11.04,11.10,12.04; Upgrade oracle solaris to a higher version than 11.3,and avoid the version 11.3; Upgrade redhat storage to a higher version than 2.0,and avoid the version 2.0; Upgrade redhat enterprise_linux_desktop to a higher version than 5.0,6.0,and avoid the version 5.0,6.0; Upgrade redhat enterprise_linux_eus to a higher version than 6.2,and avoid the version 6.2; Upgrade redhat enterprise_linux_server to a higher version than 5.0,6.0,and avoid the version 5.0,6.0; Upgrade redhat enterprise_linux_server_aus to a higher version than 6.2,and avoid the version 6.2; Upgrade redhat enterprise_linux_workstation to a higher version than 5.0,6.0,and avoid the version 5.0,6.0