CVE-2017-2792: Improper Restriction of Operations within the Bounds of a Memory Buffer

An exploitable heap corruption vulnerability exists in the iBldDirInfo functionality of Antenna House DMC HTMLFilter used by MarkLogic 8.0-6. A specially crafted xls file can cause a heap corruption resulting in arbitrary code execution. An attacker can provide a malicious xls file to trigger thi...

PT-2018-7191

Name of the Vulnerable Software and Affected Versions: MarkLogic versions 8.0-6 Description: A heap corruption issue exists in the iBldDirInfo functionality of Antenna House DMC HTMLFilter used by MarkLogic. This can be triggered by a specially crafted xls file, leading to arbitrary code executio...