CVE-2012-0213
Fixed in a distro release EPSS 8%
The UnhandledDataStructure function in hwpf/model/UnhandledDataStructure.java in Apache POI 3.8 and earlier allows remote attackers to cause a denial of service (OutOfMemoryError exception and possibly JVM destabilization) via a crafted length value in a Channel Definition Format (CDF) or Compound File Binary Format (CFBF) document.
Products: apache poi
Fixed upstream
| Ecosystem | Package | Fixed in |
|---|---|---|
| Maven | org.apache.poi:poi | 3.10-beta1 |
| Maven | org.apache.poi:poi-scratchpad | 3.10-beta1 |
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 6.0 | libjakarta-poi-java | 3.6+dfsg-1+squeeze1 |