CVE-2017-2793
HighSummary
A heap corruption vulnerability exists in the UnCompressUnicode functionality of Antenna House DMC HTMLFilter used by MarkLogic 8.0-6. A specially crafted XLS file can cause heap corruption leading to arbitrary code execution.
Risk Assessment
An attacker can provide a malicious XLS file, which poses a risk of unauthorized code execution on the system. This could lead to serious consequences for data security and system integrity.
Recommendation
It is recommended to update to the latest version of MarkLogic to mitigate this vulnerability. Additionally, precautions should be taken when handling XLS files from unknown sources.
Other vulnerabilities in Antenna House DMC HTMLFilter w MarkLogic 8.0-6
See all- CVE-2017-2798High
A heap corruption vulnerability exists in the GetIndexArray functionality of Antenna House DMC HTMLFilter as used by MarkLogic 8.0-6. A specially crafted XLS file can cause a heap corruption resulting in arbitrary code execution.
- CVE-2017-2783High
A heap corruption vulnerability exists in the FillRowFormat functionality of Antenna House DMC HTMLFilter shipped with MarkLogic 8.0-6. A specially crafted xls file can cause heap corruption leading to arbitrary code execution.
Original NVD description (English source)
An exploitable heap corruption vulnerability exists in the UnCompressUnicode functionality of Antenna House DMC HTMLFilter used by MarkLogic 8.0-6. A specially crafted xls file can cause a heap corruption resulting in arbitrary code execution. An attacker can send/provide malicious XLS file to trigger this vulnerability.