CVE-2012-6702

Expat, when used in a parser that has not called XML_SetHashSalt or passed it a seed of 0, makes it easier for context-dependent attackers to defeat…

published June 16, 2016

CVSS
—
EPSS
2%
Percentile
83.6
In the wild
Unconfirmed
What it is

Expat, when used in a parser that has not called XML_SetHashSalt or passed it a seed of 0, makes it easier for context-dependent attackers to defeat cryptographic protection mechanisms via vectors involving use of the srand function.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02371 · 83.6th percentile
Published
2016-06-16T18:00Z
EPSS history
Timeline
  • 16 JUN 18:00Z
    Expat, when used in a parser that has not called XML_SetHashSalt or passed it a seed of 0, makes it easier for context-dependent attackers to defeat…
    cvelistv5