apache poi CVE-2017-12626 is a vulnerability in Apache Poi
Published on January 29, 2018

Apache POI in versions prior to release 3.17 are vulnerable to Denial of Service Attacks: 1) Infinite Loops while parsing crafted WMF, EMF, MSG and macros (POI bugs 61338 and 61294), and 2) Out of Memory Exceptions while parsing crafted DOC, PPT and XLS (POI bugs 52372 and 61295).

Vendor Advisory NVD


Products Associated with CVE-2017-12626

Want to know whenever a new CVE is published for Apache Poi? stack.watch will email you.

Apache Poi
 

Affected Versions

Apache Software Foundation Apache POI Version < 3.17 is affected by CVE-2017-12626

Exploit Probability

EPSS
1.27%
Percentile
79.50%

EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.