CVE-2012-1102

EUVD-2012-1136
It was discovered that the XML::Atom Perl module before version 0.39 did not disable external entities when parsing XML from potentially untrusted sources. This may allow attackers to gain read access to otherwise protected resources, depending on how the library is used.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
7.5 HIGH
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Base Score
CVSS 3.x
EPSS Score
Percentile: 52%
Affected Products (NVD)
VendorProductVersion
xml\\
𝑥
< 0.39
𝑥
= Vulnerable software versions
Debian logo
Debian Releases
Debian Product
Codename
libxml-atom-perl
bookworm
0.43-1
fixed
bullseye
0.42-2.1
fixed
sid
0.43-1
fixed
trixie
0.43-1
fixed
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
libxml-atom-perl
hardy
ignored
lucid
Fixed 0.37-1+squeeze1build0.10.04.1
released
maverick
Fixed 0.37-1+squeeze1build0.10.10.1
released
natty
Fixed 0.37-1+squeeze1build0.11.04.1
released
oneiric
not-affected