Skip to content
OpenAdvisories

Package · Maven

org.apache.poi:poi-scratchpad

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

  • Medium 5.5
    CVE-2022-26336

    A carefully crafted TNEF file can cause an out of memory exception

    A shortcoming in the HMEF package of poi-scratchpad (Apache POI) allows an attacker to cause an Out of Memory exception. This package is used to read TNEF files (Microsoft Outlook and Microsoft Exchange Server). If an application uses poi-scratchpad to parse …

    Apache Software Foundation poi-scratchpad lucene-solr libapache-poi-java Ubuntu Maven
  • Medium —
    CVE-2012-0213

    Denial of Service in Apache POI

    The UnhandledDataStructure function in hwpf/model/UnhandledDataStructure.java in Apache POI 3.8 and earlier allows remote attackers to cause a denial of service (OutOfMemoryError exception and possibly JVM destabilization) via a crafted length value in a Chan…

    org.apache.poi:poi org.apache.poi:poi-scratchpad Maven