CVE-2017-2794

High

Published: 23/05/2017(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

A stack-based buffer overflow vulnerability exists in the DHFSummary functionality of AntennaHouse DMC HTMLFilter as used by MarkLogic 8.0-6. A specially crafted PPT file can cause stack corruption resulting in arbitrary code execution.

Risk Assessment

An attacker can exploit this vulnerability by sending a malicious PPT file, potentially leading to unauthorized access and execution of harmful code.

Recommendation

It is recommended to update to the latest version of the software to mitigate this vulnerability and implement filters on uploaded PPT files.

Other vulnerabilities in AntennaHouse DMC HTMLFilter

CVE-2017-2797High
An exploitable heap overflow vulnerability exists in the ParseEnvironment functionality of AntennaHouse DMC HTMLFilter as used by MarkLogic 8.0-6.

Original NVD description (English source)

An exploitable stack-based buffer overflow vulnerability exists in the DHFSummary functionality of AntennaHouse DMC HTMLFilter as used by MarkLogic 8.0-6. A specially crafted PPT file can cause a stack corruption resulting in arbitrary code execution. An attacker can send/provide malicious PPT file to trigger this vulnerability.