CVE-2017-2793

PoC —

CVSS 3.0

7.8 high

EPSS

1%p71

Published

May 23, 2017 (May 23, 2017)

Modified

Jun 17, 2026

Description

An exploitable heap corruption vulnerability exists in the UnCompressUnicode functionality of Antenna House DMC HTMLFilter used by MarkLogic 8.0-6. A specially crafted xls file can cause a heap corruption resulting in arbitrary code execution. An attacker can send/provide malicious XLS file to trigger this vulnerability.

Vendors: marklogic
Products: marklogic
Weakness: CWE-119
Vector: CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (1.4%)

In the news1 stories

Vulnerability Spotlight: AntennaHouse DMC Library Arbitrary Code Execution Flaws

Cisco TalosMay 4, 17:09 UTC · May 4, 2017Vulnerability CVE-2016-8382 CVE-2016-8383 CVE-2016-8384+8 CVEs