CVE-2014-3529

Currently unrated

Key Information:

Vendor
Apache
Status
Poi
Vendor
CVE Published:
4 September 2014

Summary

The OPC SAX setup in Apache POI before 3.10.1 allows remote attackers to read arbitrary files via an OpenXML file containing an XML external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue.

References

http://www-01.ibm.com/support/docview.wss?uid=swg21996759
x_refsource_CONFIRM
http://poi.apache.org/changes.html
x_refsource_CONFIRM
http://www.securityfocus.com/bid/78018
vdb-entryx_refsource_BID

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.