What is the CVSS score of CVE-2012-0213?

CVE-2012-0213 has a CVSS 2.0 base score of 5.0 (Medium). CVSS vector: AV:N/AC:L/Au:N/C:N/I:N/A:P. EPSS exploitation probability: 13.1%.

Is there a patch available for CVE-2012-0213?

Yes, a patch is available for CVE-2012-0213. Update the affected software to the latest version immediately.

Java CVE-2012-0213

MEDIUM

Resource Management Errors (CWE-399)

2012-08-07 security@debian.org

Denial Of Service Apache Java Poi

5.0

CVSS 2.0 · NVD

Severity by source

NVD PRIMARY

5.0 MEDIUM

AV:N/AC:L/Au:N/C:N/I:N/A:P

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

AV:N/AC:L/Au:N/C:N/I:N/A:P

Attack Vector

Network

Attack Complexity

Low

Confidentiality

None

Integrity

None

Availability

Lifecycle Timeline

CVE Published

Aug 07, 2012 - 21:55 cve.org

MEDIUM 5.0

Blast Radius

ecosystem impact

† from your stack dependencies † transitive graph · vuln.today resolves 4-path depth

52 maven packages depend on org.apache.poi:poi (6 direct, 46 indirect)
48 maven packages depend on org.apache.poi:poi-scratchpad (2 direct, 46 indirect)

Ecosystem-wide dependent count for version 3.10-beta1 and other introduced versions.

DescriptionCVE.org

The UnhandledDataStructure function in hwpf/model/UnhandledDataStructure.java in Apache POI 3.8 and earlier allows remote attackers to cause a denial of service (OutOfMemoryError exception and possibly JVM destabilization) via a crafted length value in a Channel Definition Format (CDF) or Compound File Binary Format (CFBF) document.

AnalysisAI

The UnhandledDataStructure function in hwpf/model/UnhandledDataStructure.java in Apache POI 3.8 and earlier allows remote attackers to cause a denial of service (OutOfMemoryError exception and. Rated medium severity (CVSS 5.0), this vulnerability is remotely exploitable, low attack complexity. Epss exploitation probability 13.1%.

Technical ContextAI

This vulnerability is classified under CWE-399. The UnhandledDataStructure function in hwpf/model/UnhandledDataStructure.java in Apache POI 3.8 and earlier allows remote attackers to cause a denial of service (OutOfMemoryError exception and possibly JVM destabilization) via a crafted length value in a Channel Definition Format (CDF) or Compound File Binary Format (CFBF) document. Affected products include: Apache Poi.

RemediationAI

A vendor patch is available. Apply the latest security update as soon as possible. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.