Vulnerability Details CVE-2012-0213
The UnhandledDataStructure function in hwpf/model/UnhandledDataStructure.java in Apache POI 3.8 and earlier allows remote attackers to cause a denial of service (OutOfMemoryError exception and possibly JVM destabilization) via a crafted length value in a Channel Definition Format (CDF) or Compound File Binary Format (CFBF) document.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.131
EPSS Ranking 93.7%
CVSS Severity
CVSS v2 Score 5.0
Products affected by CVE-2012-0213
-
-
cpe:2.3:a:apache:poi:0.10.0
-
cpe:2.3:a:apache:poi:0.11.0
-
cpe:2.3:a:apache:poi:0.12.0
-
cpe:2.3:a:apache:poi:0.13.0
-
cpe:2.3:a:apache:poi:0.14.0
-
-
-
-
-
-
-
cpe:2.3:a:apache:poi:1.0.0
-
cpe:2.3:a:apache:poi:1.0.1
-
cpe:2.3:a:apache:poi:1.0.2
-
cpe:2.3:a:apache:poi:1.1.0
-
cpe:2.3:a:apache:poi:1.10
-
cpe:2.3:a:apache:poi:1.2.0
-
-
cpe:2.3:a:apache:poi:1.5.1
-
-
-
-
-
cpe:2.3:a:apache:poi:2.5.1
-
-
cpe:2.3:a:apache:poi:3.0.1
-
cpe:2.3:a:apache:poi:3.0.2
-
-
-
-
-
-