Loop with Unreachable Exit Condition in Apache POI

概要

参考情報

• nvd.nist.gov/vuln/detail/CVE-2014-9527 · ADVISORY
• access.redhat.com/errata/RHSA-2016:1135 · WEB
• issues.apache.org/bugzilla/show_bug.cgi · WEB
• lists.fedoraproject.org/pipermail/package-announce/2015-February/150228.html · WEB
• poi.apache.org/changes.html · WEB
• secunia.com/advisories/61953 · WEB
• www-01.ibm.com/support/docview.wss · WEB
• securityfocus.com/bid/77726

org.apache.poi:poi のその他の脆弱性

• CVE-2019-12415中 5.5In Apache POI up to 4.1.0, when using the tool XSSFExportToXml to convert user-provided Microsoft Excel documents, a specially crafted docum…
• CVE-2017-12626高 7.5Apache POI in versions prior to release 3.17 are vulnerable to Denial of Service Attacks: 1) Infinite Loops while parsing crafted WMF, EMF, …
• CVE-2017-5644中 5.5Apache POI in versions prior to release 3.15 allows remote attackers to cause a denial of service (CPU consumption) via a specially crafted …
• CVE-2014-3574中 4.3Apache POI before 3.10.1 and 3.11.x before 3.11-beta2 allows remote attackers to cause a denial of service (CPU consumption and crash) via a…
• CVE-2014-3529中 4.3The OPC SAX setup in Apache POI before 3.10.1 allows remote attackers to read arbitrary files via an OpenXML file containing an XML external…