5 matches found
CVE-2014-3529
The OPC SAX setup in Apache POI before 3.10.1 allows remote attackers to read arbitrary files via an OpenXML file containing an XML external entity declaration in conjunction with an entity reference, related to an XML External Entity XXE issue...
CVE-2014-3529
The CVE-2014-3529 issue is an XXE in Apache POI’s OOXML processing (OPC SAX setup) prior to 3.10.1, enabling a remote attacker to read arbitrary files via an OpenXML file containing an external entity declaration. IBM and vulnerability bulletins note that upgrading poi-ooxml to 4.0.x (and general...
CVE-2014-3529
The OPC SAX setup in Apache POI before 3.10.1 allows remote attackers to read arbitrary files via an OpenXML file containing an XML external entity declaration in conjunction with an entity reference, related to an XML External Entity XXE issue...
CVE-2014-3529
The OPC SAX setup in Apache POI before 3.10.1 allows remote attackers to read arbitrary files via an OpenXML file containing an XML external entity declaration in conjunction with an entity reference, related to an XML External Entity XXE issue...
CVE-2014-3529: Undefined Security Weakness
The OPC SAX setup in Apache POI before 3.10.1 allows remote attackers to read arbitrary files via an OpenXML file containing an XML external entity declaration in conjunction with an entity reference, related to an XML External Entity XXE issue...