CVE-2017-12626

HIGH7.5EPSS 1.1%

Denial of Service in Apache POI

Published: 1/14/2021Modified: 11/8/2023
Also known as:GHSA-523c-xh4g-mh5mDEBIAN-CVE-2017-12626

Description

Apache POI in versions prior to release 3.17 are vulnerable to Denial of Service Attacks: - Infinite Loops while parsing crafted WMF, EMF, MSG and macros (POI bugs 61338 and 61294) - Out of Memory Exceptions while parsing crafted DOC, PPT and XLS (POI bugs 52372 and 61295)

Affected packages (2)

CVSS scores

SourceVersionSeverityVector
osvCVSS 3.1HIGH7.5CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

References (14)