Launchpad.net

CVE 2012-1147

readfilemap.c in expat before 2.1.0 allows context-dependent attackers to cause a denial of service (file descriptor consumption) via a large number of crafted XML files.

See the CVE page on Mitre.org for more details.