Lucene search
GoogleOSV:GHSA-JQX5-H2HW-5Q4FHistoryMay 04, 2022 - 12:28 a.m.
Denial of Service in Apache POI
2022-05-0400:28:50
Google
osv.dev
16
0.01 Low
EPSS
Percentile
83.5%
The UnhandledDataStructure function in hwpf/model/UnhandledDataStructure.java in Apache POI 3.8 and earlier allows remote attackers to cause a denial of service (OutOfMemoryError exception and possibly JVM destabilization) via a crafted length value in a Channel Definition Format (CDF) or Compound File Binary Format (CFBF) document.
References
lists.fedoraproject.org/pipermail/package-announce/2012-August/084609.html
www-01.ibm.com/support/docview.wss?uid=swg21996759
www.debian.org/security/2012/dsa-2468
bugzilla.redhat.com/show_bug.cgi?id=799078
github.com/apache/poi
github.com/apache/poi/commit/25bc679244188d63de690354db0e3f301291e252
nvd.nist.gov/vuln/detail/CVE-2012-0213
wiki.mageia.org/en/Support/Advisories/MGASA-2013-0044
Related
fedora
fedora
[SECURITY] Fedora 17 Update: apache-poi-3.8-2.fc17
2012-08-03 11:28:43
[SECURITY] Fedora 15 Update: apache-poi-3.7-7.fc15
2012-05-19 06:56:33
[SECURITY] Fedora 16 Update: apache-poi-3.8-1.fc16
2012-05-19 06:56:15
openvas
openvas
Fedora Update for apache-poi FEDORA-2012-7686
2012-05-22 00:00:00
Fedora Update for apache-poi FEDORA-2012-10835
2012-08-30 00:00:00
Fedora Update for apache-poi FEDORA-2012-10835
2012-08-30 00:00:00
cvelist
cvelist
CVE-2012-0213
2012-08-07 21:00:00
ubuntucve
ubuntucve
CVE-2012-0213
2012-08-07 00:00:00
nessus
nessus
Fedora 17 : apache-poi-3.8-2.fc17 (2012-10835)
2012-08-06 00:00:00
Fedora 15 : apache-poi-3.7-7.fc15 (2012-7686)
2012-05-21 00:00:00
Debian DSA-2468-1 : libjakarta-poi-java - unbounded memory allocation
2012-05-10 00:00:00
github
github
Denial of Service in Apache POI
2022-05-04 00:28:50
securityvulns
securityvulns
[SECURITY] [DSA 2468-1] libjakarta-poi-java security update
2012-05-14 00:00:00
Apache POI memory exhaustion
2012-05-14 00:00:00
debian
debian
[SECURITY] [DSA 2468-1] libjakarta-poi-java security update
2012-05-09 19:46:15
cve
cve
CVE-2012-0213
2012-08-07 21:55:01
nvd
nvd
CVE-2012-0213
2012-08-07 21:55:01
prion
prion
Format string
2012-08-07 21:55:00
