Skip to content
OpenAdvisories
Unscored DSA-2468-1 1 CVE

libjakarta-poi-java - unbounded memory allocation

Published May 9, 2012 · Updated Mar 9, 2026

Fixed packages 1

ReleasePackageFixed in
Debian · 6.0 libjakarta-poi-java 3.6+dfsg-1+squeeze1

Vulnerabilities 1

  • Medium —

    Denial of Service in Apache POI

    The UnhandledDataStructure function in hwpf/model/UnhandledDataStructure.java in Apache POI 3.8 and earlier allows remote attackers to cause a denial of service (OutOfMemoryError exception and possibly JVM destabilization) via a crafted length value in a Chan…