CVE:CVE-2013-0340
CNNVD:CNNVD-201303-096
Expat是一款使用C语言编写的快速流式XML解析器。
Expat 2.1.0及之前的版本中存在代码问题漏洞。当程序处理XML Internal Entities扩展时，远程攻击者可借助恶意的XML文档利用该漏洞造成拒绝服务（资源消耗），向内网服务器发送HTTP请求，或读取任意文件。
solution:Upgrade libexpat_project libexpat to a higher version than 2.4.0,and avoid the version (,2.4.0); Upgrade python python to a higher version than 3.6.15,3.7.12,3.8.12,3.9.7,and avoid the version [3.6.0,3.6.15),[3.7.0,3.7.12),[3.8.0,3.8.12),[3.9.0,3.9.7); Upgrade apple ipados to a higher version than 14.8,and avoid the version (,14.8); Upgrade apple iphone_os to a higher version than 14.8,and avoid the version (,14.8); Upgrade apple macos to a higher version than 11.6,and avoid the version (,11.6); Upgrade apple tvos to a higher version than 15.0,and avoid the version (,15.0); Upgrade apple watchos to a higher version than 8.0,and avoid the version (,8.0)