CVE-2017-2792

—

CVSS 3.0

9.6 critical

EPSS

1%p72

Published

Sep 7, 2018 (Sep 7, 2018)

Modified

Jun 17, 2026

Description

An exploitable heap corruption vulnerability exists in the iBldDirInfo functionality of Antenna House DMC HTMLFilter used by MarkLogic 8.0-6. A specially crafted xls file can cause a heap corruption resulting in arbitrary code execution. An attacker can provide a malicious xls file to trigger this vulnerability.

Vendors: marklogic
Products: marklogic
Weakness: CWE-119
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (1.5%)

In the news1 stories

Vulnerability Spotlight: AntennaHouse DMC Library Arbitrary Code Execution Flaws

Cisco TalosMay 4, 17:09 UTC · May 4, 2017Vulnerability CVE-2016-8382 CVE-2016-8383 CVE-2016-8384+8 CVEs