CVE-2012-2921

CVE-2012-2921 describes a denial-of-service vulnerability in Universal Feed Parser (feedparser or python-feedparser) versions prior to 5.1.2, affecting the mark_pilgrim feedparser product. An unauthenticated remote attacker can exploit this by submitting a specially crafted XML ENTITY declaration within a non-ASCII encoded document, leading to excessive memory consumption on the target system. This vulnerability has a CVSS score of 5.0, indicating a medium severity due to its network-based attack vector and potential for partial availability impact. There is no evidence of active exploitation, publicly available exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE.