CVE-2012-0213
apache poi: no CVSS score yet. EPSS 7.5% chance of exploitation in the next 30 days. Fixed in org.apache.poi:poi 3.10-beta1.
The UnhandledDataStructure function in hwpf/model/UnhandledDataStructure.java in Apache POI 3.8 and earlier allows remote attackers to cause a denial of service (OutOfMemoryError exception and possibly JVM destabilization) via a crafted length value in a Channel Definition Format (CDF) or Compound File Binary Format (CFBF) document.
- EPSS
- 7.5% chance of exploitation in the next 30 days; higher than 94% of CVEs (scores of 2026-10-31)
- CWE
- CWE-399
- Published
- Modified
- Record from
- the NVD, synced
Affected
- apache:poi
Packages (OSV)
| Advisory | Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|---|
| GHSA-jqx5-h2hw-5q4f | Maven | org.apache.poi:poi | <3.10-beta1 | 3.10-beta1 |
| GHSA-jqx5-h2hw-5q4f | Maven | org.apache.poi:poi-scratchpad | <3.10-beta1 | 3.10-beta1 |