Lucene search
+L

205 matches found

OSV
OSV
•added 2018/01/29 5:29 p.m.•46 views

CVE-2017-12626

Apache POI in versions prior to release 3.17 are vulnerable to Denial of Service Attacks: 1 Infinite Loops while parsing crafted WMF, EMF, MSG and macros POI bugs 61338 and 61294, and 2 Out of Memory Exceptions while parsing crafted DOC, PPT and XLS POI bugs 52372 and 61295...

7.5CVSS7.8AI score
SaveExploits0References11
OSV
OSV
•added 2018/01/29 5:29 p.m.•19 views

UBUNTU-CVE-2017-12626

Apache POI in versions prior to release 3.17 are vulnerable to Denial of Service Attacks: 1 Infinite Loops while parsing crafted WMF, EMF, MSG and macros POI bugs 61338 and 61294, and 2 Out of Memory Exceptions while parsing crafted DOC, PPT and XLS POI bugs 52372 and 61295...

7.5CVSS7.1AI score0.10142EPSS
SaveExploits3References7
Veracode
Veracode
•added 2018/01/29 4:14 a.m.•47 views

Denial Of Service (DoS)

Apache poi is vulnerable to denial of service DoS attacks. Attackers can cause infinite loops, when parsing WMF, EMF, MSG and macro files. They can also cause Out-of-Memory OOM exceptions to occur when parsing DOC, PPT and XLS files...

7.5CVSS8.1AI score0.10142EPSS
SaveExploits3References22Affected Software2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2018/01/29 12:00 a.m.•3 views

CVE-2017-12626: Loop with Unreachable Exit Condition

Apache POI in versions prior to release 3.17 are vulnerable to Denial of Service Attacks: 1 Infinite Loops while parsing crafted WMF, EMF, MSG and macros POI bugs 61338 and 61294, and 2 Out of Memory Exceptions while parsing crafted DOC, PPT and XLS POI bugs 52372 and 61295...

7.5CVSS7.3AI score0.10142EPSS
SaveExploits3References6
Prion
Prion
•added 2017/12/28 7:29 p.m.•19 views

Code injection

pptreader.dll in Kingsoft WPS Office 10.1.0.6930 allows remote attackers to cause a denial of service via a crafted PPT file, aka CNVD-2017-35482...

4.3CVSS5.4AI score0.00824EPSS
SaveExploits0References1Affected Software1
NVD
NVD
•added 2017/12/28 7:29 p.m.•25 views

CVE-2017-17967

pptreader.dll in Kingsoft WPS Office 10.1.0.6930 allows remote attackers to cause a denial of service via a crafted PPT file, aka CNVD-2017-35482...

5.5CVSS5.4AI score0.00824EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2017/12/28 12:00 a.m.•2 views

CVE-2017-17967: Improper Input Validation

pptreader.dll in Kingsoft WPS Office 10.1.0.6930 allows remote attackers to cause a denial of service via a crafted PPT file, aka CNVD-2017-35482...

5.5CVSS6AI score0.00824EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2017/12/21 12:00 a.m.•43 views

Debian DLA-1214-1 : libreoffice security update

Marcin Noga discovered two vulnerabilities in LibreOffice, which could result in the execution of arbitrary code if a malformed PPT or DOC document is opened. For Debian 7 'Wheezy', these problems have been fixed in version 1:3.5.4+dfsg2-0+deb7u10. We recommend that you upgrade your libreoffice...

7.8CVSS7.2AI score0.02889EPSS
SaveExploits2References4
Debian
Debian
•added 2017/12/20 10:26 p.m.•74 views

[SECURITY] [DLA 1214-1] libreoffice security update

Package : libreoffice Version : 1:3.5.4+dfsg2-0+deb7u10 CVE ID : CVE-2017-12607 CVE-2017-12608 Marcin Noga discovered two vulnerabilities in LibreOffice, which could result in the execution of arbitrary code if a malformed PPT or DOC document is opened. For Debian 7 "Wheezy", these problems have...

7.8CVSS8.3AI score0.02889EPSS
SaveExploits2
OpenVAS
OpenVAS
•added 2017/11/27 12:00 a.m.•46 views

Apache OpenOffice Multiple DoS And Information Disclosure Vulnerabilities - Mac OS X

Apache OpenOffice is prone to multiple denial of service and information disclosure vulnerabilities. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

7.8CVSS6.5AI score0.03122EPSS
SaveExploits3References6
Prion
Prion
•added 2017/11/20 7:29 p.m.•24 views

Memory corruption

A vulnerability in OpenOffice's PPT file parser before 4.1.4, and specifically in PPTStyleSheet, allows attackers to craft malicious documents that cause denial of service memory corruption and application crash potentially resulting in arbitrary code execution...

6.8CVSS7.8AI score0.02588EPSS
SaveExploits1References6Affected Software2
NVD
NVD
•added 2017/11/20 7:29 p.m.•20 views

CVE-2017-12607

A vulnerability in OpenOffice's PPT file parser before 4.1.4, and specifically in PPTStyleSheet, allows attackers to craft malicious documents that cause denial of service memory corruption and application crash potentially resulting in arbitrary code execution...

7.8CVSS8AI score0.02588EPSS
SaveExploits1References6
OSV
OSV
•added 2017/11/20 7:29 p.m.•6 views

DEBIAN-CVE-2017-12607

A vulnerability in OpenOffice's PPT file parser before 4.1.4, and specifically in PPTStyleSheet, allows attackers to craft malicious documents that cause denial of service memory corruption and application crash potentially resulting in arbitrary code execution...

7.8CVSS8AI score0.02588EPSS
SaveExploits1References1
Cvelist
Cvelist
•added 2017/11/20 7:00 p.m.•44 views

CVE-2017-12607

A vulnerability in OpenOffice's PPT file parser before 4.1.4, and specifically in PPTStyleSheet, allows attackers to craft malicious documents that cause denial of service memory corruption and application crash potentially resulting in arbitrary code execution...

7.9AI score0.02588EPSS
SaveExploits1References6
CVE
CVE
•added 2017/11/20 7:00 p.m.•174 views

CVE-2017-12607

CVE-2017-12607 affects OpenOffice/OpenOffice.org and specifically the PPT file parser’s PPTStyleSheet. A crafted PPT document can trigger memory corruption and an application crash, with potential for arbitrary code execution. Vulnerable: OpenOffice prior to 4.1.4. Mitigation: upgrade to a fixed ...

7.8CVSS7.8AI score0.02588EPSS
SaveExploits1References6Affected Software1
Debian CVE
Debian CVE
•added 2017/11/20 7:00 p.m.•55 views

CVE-2017-12607

A vulnerability in OpenOffice's PPT file parser before 4.1.4, and specifically in PPTStyleSheet, allows attackers to craft malicious documents that cause denial of service memory corruption and application crash potentially resulting in arbitrary code execution...

7.8CVSS6.5AI score0.02588EPSS
SaveExploits1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2017/11/20 12:00 a.m.•1 views

CVE-2017-12607: Out-of-bounds Write

A vulnerability in OpenOffice's PPT file parser before 4.1.4, and specifically in PPTStyleSheet, allows attackers to craft malicious documents that cause denial of service memory corruption and application crash potentially resulting in arbitrary code execution...

7.8CVSS7.3AI score0.02588EPSS
SaveExploits1References2
Debian
Debian
•added 2017/11/08 9:17 p.m.•81 views

[SECURITY] [DSA 4022-1] libreoffice security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4022-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff November 07, 2017 https://www.debian.org/security/faq -...

7.8CVSS8.4AI score0.02889EPSS
SaveExploits2
CNVD
CNVD
•added 2017/11/07 12:00 a.m.•5 views

Denial of Service Vulnerability in Kingsoft WPS PPT

WPS Office is an office software suite developed independently by Kingsoft Corporation. A denial of service vulnerability exists in Kingsoft WPS pptreader.dll when parsing a specific ppt format, which can be exploited by attackers to launch a denial of service attack...

6.8AI score
SaveExploits0
OpenVAS
OpenVAS
•added 2017/11/04 12:00 a.m.•35 views

Ubuntu: Security Advisory (USN-3472-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS7.7AI score0.02889EPSS
SaveExploits2References2
Rows per page
Query Builder