CVE-2017-2797

CVE-2017-2797 affects AntennaHouse DMC HTMLFilter (ParseEnvironment) as used by MarkLogic 8.0-6. A heap-based buffer overflow occurs due to inconsistent sizing between allocated buffer (textMasterStyleAtom.size) and the subsequent read size (fontEntityAtom.size) in the PPT parsing flow. Specifica...