CVE-2017-2798
HighSummary
A heap corruption vulnerability exists in the GetIndexArray functionality of Antenna House DMC HTMLFilter as used by MarkLogic 8.0-6. A specially crafted XLS file can cause a heap corruption resulting in arbitrary code execution.
Risk Assessment
An attacker can exploit this vulnerability by sending a malicious XLS file, potentially leading to unauthorized access to the system and data loss.
Recommendation
It is recommended to update to the latest version of MarkLogic and implement filters to protect against malicious XLS files.
Other vulnerabilities in Antenna House DMC HTMLFilter w MarkLogic 8.0-6
See all- CVE-2017-2793High
A heap corruption vulnerability exists in the UnCompressUnicode functionality of Antenna House DMC HTMLFilter used by MarkLogic 8.0-6. A specially crafted XLS file can cause heap corruption leading to arbitrary code execution.
- CVE-2017-2783High
A heap corruption vulnerability exists in the FillRowFormat functionality of Antenna House DMC HTMLFilter shipped with MarkLogic 8.0-6. A specially crafted xls file can cause heap corruption leading to arbitrary code execution.
Original NVD description (English source)
An exploitable heap corruption vulnerability exists in the GetIndexArray functionality of Antenna House DMC HTMLFilter as used by MarkLogic 8.0-6. A specially crafted XLS file can cause a heap corruption resulting in arbitrary code execution. An attacker can send or provide a malicious XLS file to trigger this vulnerability.