PT-2024-40028

Name of the Vulnerable Software and Affected Versions Zend Dom, Zend Feed, Zend Soap, and Zend XmlRpc affected versions not specified Description The issue concerns XML Entity Expansion XEE vectors, which can lead to Denial of Service attacks. XEE attacks happen when the XML DOCTYPE declaration...

UBUNTU-CVE-2012-6532

1 ZendDom, 2 ZendFeed, 3 ZendSoap, and 4 ZendXmlRpc in Zend Framework 1.x before 1.11.13 and 1.12.x before 1.12.0 allow remote attackers to cause a denial of service CPU consumption via recursive or circular references in an XML entity definition in an XML DOCTYPE declaration, aka an XML Entity...

PT-2013-1995

Name of the Vulnerable Software and Affected Versions Zend Framework 1.x versions 1.11.13 and earlier Zend Framework 1.x versions 1.12.x before 1.12.0 Description The issue arises from the improper handling of SimpleXMLElement classes by Zend Dom, Zend Feed, and Zend Soap components in Zend...