CVE-2012-0213 Medium Severity Vulnerability detected by WhiteSource

[mend-bolt-for-github]

CVE-2012-0213 - Medium Severity Vulnerability

Vulnerable Library - poi-3.8.jar

Apache POI - Java API To Access Microsoft Format Files

path: /root/.m2/repository/org/apache/poi/poi/3.8/poi-3.8.jar,2/repository/org/apache/poi/poi/3.8/poi-3.8.jar

Library home page: http://poi.apache.org/

Dependency Hierarchy:

• ❌ poi-3.8.jar (Vulnerable Library)

Found in HEAD commit: 23068bfa8fba8e934988efafc64fa2cf0fdb8462

Vulnerability Details

The UnhandledDataStructure function in hwpf/model/UnhandledDataStructure.java in Apache POI 3.8 and earlier allows remote attackers to cause a denial of service (OutOfMemoryError exception and possibly JVM destabilization) via a crafted length value in a Channel Definition Format (CDF) or Compound File Binary Format (CFBF) document.

Publish Date: 2012-08-07

URL: CVE-2012-0213

CVSS 2 Score Details (5.0)

Base Score Metrics not available

Suggested Fix

Type: Change files

Origin: apache/poi@c702bc5#diff-c81d997680cf57753553ea5bc8b6104d

Release Date: 2013-05-29

Fix Resolution: Replace or update the following file: UnhandledDataStructure.java

---

Step up your Open Source Security Game with WhiteSource here