CVE-2011-1156

Severity

50%

Complexity

99%

Confidentiality

48%

feedparser.py in Universal Feed Parser (aka feedparser or python-feedparser) before 5.0.1 allows remote attackers to cause a denial of service (application crash) via a malformed DOCTYPE declaration.

CVSS 2.0 Base Score 5. CVSS Attack Vector: network. CVSS Attack Complexity: low. CVSS Vector: (AV:N/AC:L/Au:N/C:N/I:N/A:P).

Overview

Type

Mark Pilgrim Universal Feed Parser

First reported 13 years ago

2011-04-11 18:55:00

Last updated 13 years ago

2011-08-24 03:16:00

Affected Software

Mark Pilgrim Universal Feed Parser 3.0

3.0

Mark Pilgrim Universal Feed Parser 3.0.1

3.0.1

Mark Pilgrim Universal Feed Parser 3.1

3.1

Mark Pilgrim Universal Feed Parser 3.2

3.2

Mark Pilgrim Universal Feed Parser 3.3

3.3

Mark Pilgrim Universal Feed Parser 4.0

4.0

Mark Pilgrim Universal Feed Parser 4.0.1

4.0.1

Mark Pilgrim Universal Feed Parser 4.0.2

4.0.2

Mark Pilgrim Universal Feed Parser 4.1

4.1

References

[opensuse-updates] 20110408 openSUSE-SU-2011:0314-1 (moderate): python-feedparser security update

http://support.novell.com/security/cve/CVE-2011-1156.html

MDVSA-2011:082

46867

https://bugzilla.novell.com/show_bug.cgi?id=680074

Exploit, Patch

https://bugzilla.redhat.com/show_bug.cgi?id=684877

https://code.google.com/p/feedparser/issues/detail?id=91