CVE-2017-2794

PoC —

CVSS 3.0

7.8 high

EPSS

1%p69

Published

May 23, 2017 (May 23, 2017)

Modified

Jun 17, 2026

Description

An exploitable stack-based buffer overflow vulnerability exists in the DHFSummary functionality of AntennaHouse DMC HTMLFilter as used by MarkLogic 8.0-6. A specially crafted PPT file can cause a stack corruption resulting in arbitrary code execution. An attacker can send/provide malicious PPT file to trigger this vulnerability.

Vendors: marklogic
Products: marklogic
Weakness: CWE-119
Vector: CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (1.3%)

In the news1 stories

Vulnerability Spotlight: AntennaHouse DMC Library Arbitrary Code Execution Flaws

Cisco TalosMay 4, 17:09 UTC · May 4, 2017Vulnerability CVE-2016-8382 CVE-2016-8383 CVE-2016-8384+8 CVEs