CVE-2017-2783

CVE-2017-2783 describes a heap-corruption/code-execution vulnerability in Antenna House DMC HTMLFilter’s FillRowFormat, shipped with MarkLogic 8.0-6. The root cause is a missing upper-bound check on a 0x27E record’s 0x0200 column index (col). While the code verifies that col >= colMic, it does...