Antenna House DMC HTMLFilter Memory Corruption (CVE-2017-2799)

A remote code execution vulnerability exists in Marklogic. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

CVE-2017-2795

An exploitable heap corruption vulnerability exists in the Txo functionality of Antenna House DMC HTMLFilter as used by MarkLogic 8.0-6. A specially crafted xls file can cause a heap corruption resulting in arbitrary code execution. An attacker can send/provide malicious XLS file to trigger this...

CVE-2017-2792

An exploitable heap corruption vulnerability exists in the iBldDirInfo functionality of Antenna House DMC HTMLFilter used by MarkLogic 8.0-6. A specially crafted xls file can cause a heap corruption resulting in arbitrary code execution. An attacker can provide a malicious xls file to trigger thi...

Heap overflow

An exploitable heap corruption vulnerability exists in the iBldDirInfo functionality of Antenna House DMC HTMLFilter used by MarkLogic 8.0-6. A specially crafted xls file can cause a heap corruption resulting in arbitrary code execution. An attacker can provide a malicious xls file to trigger thi...

CVE-2017-2795

An exploitable heap corruption vulnerability exists in the Txo functionality of Antenna House DMC HTMLFilter as used by MarkLogic 8.0-6. A specially crafted xls file can cause a heap corruption resulting in arbitrary code execution. An attacker can send/provide malicious XLS file to trigger this...

CVE-2017-2795

CVE-2017-2795 exploits a heap overflow in Antenna House DMC HTMLFilter (Txo/Continue records). The code allocates a buffer with size derived from a field in TxO (bufferSize = 2 * word), then copies data into this buffer via a memcpy using a separate size from the Continue record. In observed samp...

MarkLogic MarkLogic Antenna House DMC HTMLFilter Heap Buffer Overflow Vulnerability

MarkLogic MarkLogic is a database software from MarkLogic Corporation, USA. The software is characterized by hierarchical storage, dual-temporal and scalability.Antenna House DMC HTMLFilter is one of the HTML generic generator libraries developed by Antenna House, Inc. in the United States. A hea...

Heap overflow

An exploitable heap corruption vulnerability exists in the AddSst functionality of Antenna House DMC HTMLFilter as used by MarkLogic 8.0-6. A specially crafted XLS file can cause a heap corruption resulting in arbitrary code execution. An attacker can send or provide a malicious XLS file to trigg...

CVE-2017-2798

The CVE-2017-2798 entry describes a buffer/heap issue in Antenna House DMC HTMLFilter GetIndexArray, used by MarkLogic 8.0-6. An attacker can trigger a heap corruption via a crafted XLS file, potentially enabling arbitrary code execution. The vulnerability stems from out-of-bounds writes in the c...

Heap overflow

An exploitable heap corruption vulnerability exists in the UnCompressUnicode functionality of Antenna House DMC HTMLFilter used by MarkLogic 8.0-6. A specially crafted xls file can cause a heap corruption resulting in arbitrary code execution. An attacker can send/provide malicious XLS file to...

CVE-2017-2783

An exploitable heap corruption vulnerability exists in the FillRowFormat functionality of Antenna House DMC HTMLFilter that is shipped with MarkLogic 8.0-6. A specially crafted xls file can cause a heap corruption resulting in arbitrary code execution. An attacker can send/provide malicious xls...

CVE-2017-2793

An exploitable heap corruption vulnerability exists in the UnCompressUnicode functionality of Antenna House DMC HTMLFilter used by MarkLogic 8.0-6. A specially crafted xls file can cause a heap corruption resulting in arbitrary code execution. An attacker can send/provide malicious XLS file to...

CVE-2017-2783

CVE-2017-2783 describes a heap-corruption/code-execution vulnerability in Antenna House DMC HTMLFilter’s FillRowFormat, shipped with MarkLogic 8.0-6. The root cause is a missing upper-bound check on a 0x27E record’s 0x0200 column index (col). While the code verifies that col >= colMic, it does...