Vulnerabilities > CVE-2022-26336

CVSS 5.5 - MEDIUM

Attack vector

LOCAL

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

NONE

Integrity impact

NONE

Availability impact

HIGH

local

low complexity

apache

netapp

NVD

Published: 2022-03-04

Updated: 2024-11-21

Summary

A shortcoming in the HMEF package of poi-scratchpad (Apache POI) allows an attacker to cause an Out of Memory exception. This package is used to read TNEF files (Microsoft Outlook and Microsoft Exchange Server). If an application uses poi-scratchpad to parse TNEF files and the application allows untrusted users to supply them, then a carefully crafted file can cause an Out of Memory exception. This issue affects poi-scratchpad version 5.2.0 and prior versions. Users are recommended to upgrade to poi-scratchpad 5.2.1.

Vulnerable Configurations

Part	Description	Count
Application	Apache Apache POI 0.1 Apache POI 0.2 Apache POI 0.3 Apache POI 0.4 Apache POI 0.5 Apache POI 0.6 Apache POI 0.7 Apache POI 0.10.0 Apache POI 0.11.0 Apache POI 0.12.0 Apache POI 0.13.0 Apache POI 0.14.0 Apache POI 1.0.0 Apache POI 1.0.1 Apache POI 1.0.2 Apache POI 1.1.0 Apache POI 1.2.0 Apache POI 1.5 Apache POI 1.5.1 Apache POI 1.7 Apache POI 1.8 Apache POI 1.10 Apache POI 2.0 Apache POI 2.5 Apache POI 2.5.1 Apache POI 3.0 Apache POI 3.0.1 Apache POI 3.0.2 Apache POI 3.1 Apache POI 3.2 Apache POI 3.5 Apache POI 3.6 Apache POI 3.7 Apache POI 3.8 Apache POI 3.9 Apache POI 3.10 Apache POI 3.11 Apache POI 3.13 Apache POI 3.14 Apache POI 3.17 Apache POI 4.1.0 Apache POI 4.1.1 Apache POI 4.1.2 Apache POI 5.0.0 Apache POI 5.1.0 Apache POI 5.2.0	74
Application	Netapp Netapp Active IQ Unified Manager -	3

Vulnerabilities > CVE-2022-26336 {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Vulnerabilities","item":"https://cyber.vumetric.com/vulns/"},{"@type":"ListItem","position":2,"name":"CVE-2022-26336"}]}

Summary

Vulnerable Configurations

References

Vulnerabilities > CVE-2022-26336