1 matches found
docx4j: Stack Overflow via Cyclic `w:basedOn` Style Chain leads to Denial of Service
Summary docx4j's PropertyResolver and several adjacent helpers recursively walk the OpenXML style inheritance chain w:basedOn without cycle detection. A WordprocessingML document containing a cyclic style chain for example, Style A based on B and Style B based on A causes unbounded recursion and ...
5.4AI score
SaveExploits0References3Affected Software1
20