CVE-2012-0213

Published: Aug 7, 2012Modified: Apr 29, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

The UnhandledDataStructure function in hwpf/model/UnhandledDataStructure.java in Apache POI 3.8 and earlier allows remote attackers to cause a denial of service (OutOfMemoryError exception and possibly JVM destabilization) via a crafted length value in a Channel Definition Format (CDF) or Compound File Binary Format (CFBF) document.

Affected (60)

Products: Apache: Poi

Apache

1 product

Poi

Configuration A

60 vulnerable

Vulnerable Software	Affected Versions
Apache Poi	Up to 3.8
Apache Poi	Version 0.10.0
Apache Poi	Version 0.11.0
Apache Poi	Version 0.12.0
Apache Poi	Version 0.13.0
Apache Poi	Version 0.14.0
Apache Poi	Version 0.1
Apache Poi	Version 0.2
Apache Poi	Version 0.3
Apache Poi	Version 0.4
Apache Poi	Version 0.5
Apache Poi	Version 0.6
Apache Poi	Version 0.7
Apache Poi	Version 1.0.0
Apache Poi	Version 1.0.1
Apache Poi	Version 1.0.2
Apache Poi	Version 1.1.0
Apache Poi	Version 1.10 dev
Apache Poi	Version 1.2.0
Apache Poi	Version 1.5.1
Apache Poi	Version 1.5
Apache Poi	Version 1.7 dev
Apache Poi	Version 1.8 dev
Apache Poi	Version 2.0
Apache Poi	Version 2.0 pre1
Apache Poi	Version 2.0 pre2
Apache Poi	Version 2.0 pre3
Apache Poi	Version 2.0 rc1
Apache Poi	Version 2.0 rc2
Apache Poi	Version 2.5.1
Apache Poi	Version 2.5
Apache Poi	Version 3.0.1
Apache Poi	Version 3.0.2
Apache Poi	Version 3.0.2 beta1
Apache Poi	Version 3.0.2 beta2
Apache Poi	Version 3.0
Apache Poi	Version 3.0 alpha1
Apache Poi	Version 3.0 alpha2
Apache Poi	Version 3.0 alpha3
Apache Poi	Version 3.1
Apache Poi	Version 3.1 beta1
Apache Poi	Version 3.1 beta2
Apache Poi	Version 3.2
Apache Poi	Version 3.5
Apache Poi	Version 3.5 beta1
Apache Poi	Version 3.5 beta2
Apache Poi	Version 3.5 beta3
Apache Poi	Version 3.5 beta4
Apache Poi	Version 3.5 beta5
Apache Poi	Version 3.5 beta6
Apache Poi	Version 3.6
Apache Poi	Version 3.7
Apache Poi	Version 3.7 beta1
Apache Poi	Version 3.7 beta2
Apache Poi	Version 3.7 beta3
Apache Poi	Version 3.8 beta1
Apache Poi	Version 3.8 beta2
Apache Poi	Version 3.8 beta3
Apache Poi	Version 3.8 beta4
Apache Poi	Version 3.8 beta5