5

CVE-2012-0213

The UnhandledDataStructure function in hwpf/model/UnhandledDataStructure.java in Apache POI 3.8 and earlier allows remote attackers to cause a denial of service (OutOfMemoryError exception and possibly JVM destabilization) via a crafted length value in a Channel Definition Format (CDF) or Compound File Binary Format (CFBF) document.

Data is provided by the National Vulnerability Database (NVD)
Apache ≫ Poi Version <= 3.8
Apache ≫ Poi Version0.1
Apache ≫ Poi Version0.2
Apache ≫ Poi Version0.3
Apache ≫ Poi Version0.4
Apache ≫ Poi Version0.5
Apache ≫ Poi Version0.6
Apache ≫ Poi Version0.7
Apache ≫ Poi Version0.10.0
Apache ≫ Poi Version0.11.0
Apache ≫ Poi Version0.12.0
Apache ≫ Poi Version0.13.0
Apache ≫ Poi Version0.14.0
Apache ≫ Poi Version1.0.0
Apache ≫ Poi Version1.0.1
Apache ≫ Poi Version1.0.2
Apache ≫ Poi Version1.1.0
Apache ≫ Poi Version1.2.0
Apache ≫ Poi Version1.5
Apache ≫ Poi Version1.5.1
Apache ≫ Poi Version1.7 Updatedev
Apache ≫ Poi Version1.8 Updatedev
Apache ≫ Poi Version1.10 Updatedev
Apache ≫ Poi Version2.0
Apache ≫ Poi Version2.0 Updatepre1
Apache ≫ Poi Version2.0 Updatepre2
Apache ≫ Poi Version2.0 Updatepre3
Apache ≫ Poi Version2.0 Updaterc1
Apache ≫ Poi Version2.0 Updaterc2
Apache ≫ Poi Version2.5
Apache ≫ Poi Version2.5.1
Apache ≫ Poi Version3.0
Apache ≫ Poi Version3.0 Updatealpha1
Apache ≫ Poi Version3.0 Updatealpha2
Apache ≫ Poi Version3.0 Updatealpha3
Apache ≫ Poi Version3.0.1
Apache ≫ Poi Version3.0.2
Apache ≫ Poi Version3.0.2 Updatebeta1
Apache ≫ Poi Version3.0.2 Updatebeta2
Apache ≫ Poi Version3.1
Apache ≫ Poi Version3.1 Updatebeta1
Apache ≫ Poi Version3.1 Updatebeta2
Apache ≫ Poi Version3.2
Apache ≫ Poi Version3.5
Apache ≫ Poi Version3.5 Updatebeta1
Apache ≫ Poi Version3.5 Updatebeta2
Apache ≫ Poi Version3.5 Updatebeta3
Apache ≫ Poi Version3.5 Updatebeta4
Apache ≫ Poi Version3.5 Updatebeta5
Apache ≫ Poi Version3.5 Updatebeta6
Apache ≫ Poi Version3.6
Apache ≫ Poi Version3.7
Apache ≫ Poi Version3.7 Updatebeta1
Apache ≫ Poi Version3.7 Updatebeta2
Apache ≫ Poi Version3.7 Updatebeta3
Apache ≫ Poi Version3.8 Updatebeta1
Apache ≫ Poi Version3.8 Updatebeta2
Apache ≫ Poi Version3.8 Updatebeta3
Apache ≫ Poi Version3.8 Updatebeta4
Apache ≫ Poi Version3.8 Updatebeta5
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 13.06% 0.934
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 5 10 2.9
AV:N/AC:L/Au:N/C:N/I:N/A:P