CVE-2012-0213

The UnhandledDataStructure function in hwpf/model/UnhandledDataStructure.java in Apache POI 3.8 and earlier allows remote attackers to cause a denial of service OutOfMemoryError exception and possibly JVM destabilization via a crafted length value in a Channel Definition Format CDF or Compound Fi...

CVE-2012-0213

The CVE-2012-0213 vulnerability resides in Apache POI 3.8 and earlier, specifically UnhandledDataStructure.java, where crafted CDF/CFBF data can cause a denial of service (OutOfMemoryError). IBM and vendor advisories consistently tie this CVE to Apache POI loaded in IBM QRadar SIEM and related IB...

CVE-2012-0213: Undefined Security Weakness

The UnhandledDataStructure function in hwpf/model/UnhandledDataStructure.java in Apache POI 3.8 and earlier allows remote attackers to cause a denial of service OutOfMemoryError exception and possibly JVM destabilization via a crafted length value in a Channel Definition Format CDF or Compound Fi...

PT-2012-2405

Name of the Vulnerable Software and Affected Versions Apache POI versions 3.8 and earlier Description The issue allows remote attackers to cause a denial of service, potentially leading to an OutOfMemoryError exception and JVM destabilization, by exploiting a crafted length value in a Channel...

Mandriva Update for file MDVSA-2012:035 (file)

Check for the Version of file OpenVAS Vulnerability Test Mandriva Update for file MDVSA-2012:035 file Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the ter...

Mandriva Update for file MDVSA-2012:035 (file)

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Out-of-bounds

file before 5.11 and libmagic allow remote attackers to cause a denial of service crash via a crafted Composite Document File CDF file that triggers 1 an out-of-bounds read or 2 an invalid pointer dereference...

CVE-2012-1571

CVE-2012-1571 describes DoS via crafted CDF files that trigger out-of-bounds read or invalid pointer dereference in the File Information (fileinfo) component (libmagic) used by file and PHP. Public Advisories confirm the issue arises from an incomplete fix and that affected products include the f...

CVE-2012-1571

file before 5.11 and libmagic allow remote attackers to cause a denial of service crash via a crafted Composite Document File CDF file that triggers 1 an out-of-bounds read or 2 an invalid pointer dereference...

CVE-2012-1571

file before 5.11 and libmagic allow remote attackers to cause a denial of service crash via a crafted Composite Document File CDF file that triggers 1 an out-of-bounds read or 2 an invalid pointer dereference...

CVE-2012-1571

file before 5.11 and libmagic allow remote attackers to cause a denial of service crash via a crafted Composite Document File CDF file that triggers 1 an out-of-bounds read or 2 an invalid pointer dereference...

PT-2012-1066

Name of the Vulnerable Software and Affected Versions file versions prior to 5.11 libmagic versions prior to 5.11 Description The issue is related to multiple vulnerabilities in the file package, which can lead to a denial of service crash when a crafted Composite Document File CDF is processed...

CVE-2012-1571: Improper Restriction of Operations within the Bounds of a Memory Buffer

file before 5.11 and libmagic allow remote attackers to cause a denial of service crash via a crafted Composite Document File CDF file that triggers 1 an out-of-bounds read or 2 an invalid pointer dereference...

Debian Security Advisory DSA 2422-2 (file)

The remote host is missing an update to file announced via advisory DSA 2422-2. OpenVAS Vulnerability Test $Id: deb24222.nasl 6612 2017-07-07 12:08:03Z cfischer $ Description: Auto-generated from advisory DSA 2422-2 file Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc...

Debian: Security Advisory (DSA-2422-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] [DSA 2422-2] file regression fix

------------------------------------------------------------------------- Debian Security Advisory DSA-2422-2 [email protected] http://www.debian.org/security/ Thijs Kinkhorst May 09, 2012 http://www.debian.org/security/faq -...

Mandriva Linux Security Advisory : file (MDVSA-2012:035)

Multiple out-of heap-based buffer read flaws and invalid pointer dereference flaws were found in the way file, utility for determining of file types processed header section for certain Composite Document Format CDF files. A remote attacker could provide a specially crafted CDF file, which once...

Debian Security Advisory DSA 2422-1 (file)

The remote host is missing an update to file announced via advisory DSA 2422-1. This VT has been deprecated and merged into the VT SPDX-FileCopyrightText: 2012 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

[SECURITY] [DSA 2422-1] file security update

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------- Debian Security Advisory DSA-2422-1 [email protected] http://www.debian.org/security/ Florian Weimer February 29, 2012 http://www.debian.org/security/faq -...

Debian DSA-2422-2 : file - missing bounds checks

The file type identification tool, file, and its associated library, libmagic, do not properly process malformed files in the Composite Document File CDF format, leading to crashes. Note that after this update, file may return different detection results for CDF files well-formed or not. The new...