Vulnerability DatabaseWS-2016-7061
Mend.io Vulnerability Database
The largest open source vulnerability database
What is a Vulnerability ID?
New vulnerability? Tell us about it!
WS-2016-7061
Published:May 19, 2026
Updated:May 19, 2026
Apache POI before 3.16-beta1 is vulnerable to bufferoverflow attack due to lack of length sanity check for length of embedded OLE10Native.
Affected Packages
dia_umpire (CONDA):
Affected version(s) >=2.1.2 <=2.1.6
Fix Suggestion:
Update to version no_fix
pepquery (CONDA):
Affected version(s) >=1.2.0 <2.0.2
Fix Suggestion:
Update to version 2.0.2
r-xlsxjars (CONDA):
Affected version(s) =0.6.1
Fix Suggestion:
Update to version no_fix
peptide-shaker (CONDA):
Affected version(s) >=1.16.29 <2.0.5
Fix Suggestion:
Update to version 2.0.5
searchgui (CONDA):
Affected version(s) >=2.1.4 <4.0.4
Fix Suggestion:
Update to version 4.0.4
peptide-shaker (CONDA):
Affected version(s) >=1.1.3 <1.16.26
Fix Suggestion:
Update to version 1.16.26
eoulsan (CONDA):
Affected version(s) =2.0_beta4 <2.2
Fix Suggestion:
Update to version 2.2
openrefine (CONDA):
Affected version(s) =2.7 <3.4
Fix Suggestion:
Update to version 3.4
metanovo (CONDA):
Affected version(s) =1.9.4
Fix Suggestion:
Update to version no_fix
mpa-portable (CONDA):
Affected version(s) >=1.9.0 <=2.0.0
Fix Suggestion:
Update to version no_fix
ziack/jasperphp (PHP):
Affected version(s) >=v1.0.0 <v2.4.0
Fix Suggestion:
Update to version v2.4.0
smart145/phpjasper (PHP):
Affected version(s) =v1.0 <v1.1
Fix Suggestion:
Update to version v1.1
smart145/phpjasper (PHP):
Affected version(s) >=v2.2 <v2.6
Fix Suggestion:
Update to version v2.6
rdpascua/jasperstarter (PHP):
Affected version(s) >=3.1.0 <3.5.0
Fix Suggestion:
Update to version 3.5.0
ziack/jasperphp (PHP):
Affected version(s) =dev-development <dev-master
Fix Suggestion:
Update to version dev-master
a.ambrogini/phpjasper (PHP):
Affected version(s) =v1.0 <v1.1
Fix Suggestion:
Update to version v1.1
fazo96/jasperphp (PHP):
Affected version(s) >=v1.0.0 <=v2.3.0
Fix Suggestion:
Update to version no_fix
vufind/vufind (PHP):
Affected version(s) =dev-legacy/jquerymobile <dev-legacy/mink-autoretry
Fix Suggestion:
Update to version dev-legacy/mink-autoretry
copam/phpjasper (PHP):
Affected version(s) =v1.4 <v1.5
Fix Suggestion:
Update to version v1.5
silverstripe/fulltextsearch-extract (PHP):
Affected version(s) =1.0.0
Fix Suggestion:
Update to version no_fix
lavela/phpjasper (PHP):
Affected version(s) =dev-develop <dev-master
Fix Suggestion:
Update to version dev-master
dericktan/phpjasper (PHP):
Affected version(s) >=dev-master <v1.2
Fix Suggestion:
Update to version v1.2
minkbear/phpjasper (PHP):
Affected version(s) >=v1.0 <v2.6
Fix Suggestion:
Update to version v2.6
xidmonx/jasperphp (PHP):
Affected version(s) =dev-development <dev-master
Fix Suggestion:
Update to version dev-master
cossou/jasperphp (PHP):
Affected version(s) >=v1.0.0 <v2.4.0
Fix Suggestion:
Update to version v2.4.0
myparkfolio/jars-poi (PHP):
Affected version(s) =dev-master
Fix Suggestion:
Update to version no_fix
smart145/phpjasper (PHP):
Affected version(s) >=v1.6 <v1.8
Fix Suggestion:
Update to version v1.8
cossou/jasperphp (PHP):
Affected version(s) =dev-development <dev-master
Fix Suggestion:
Update to version dev-master
i4n/phpjasper (PHP):
Affected version(s) =dev-master <1.1.0
Fix Suggestion:
Update to version 1.1.0
copam/phpjasper7 (PHP):
Affected version(s) >=v1.0 <v1.3
Fix Suggestion:
Update to version v1.3
copam/phpjasper7 (PHP):
Affected version(s) =dev-develop <dev-master
Fix Suggestion:
Update to version dev-master
siu-toba/jasper (PHP):
Affected version(s) >=v5.6 <=v5.6.2
Fix Suggestion:
Update to version no_fix
vufind/vufind (PHP):
Affected version(s) =dev-feature/foundation5 <dev-release-5.0
Fix Suggestion:
Update to version dev-release-5.0
dericktan/phpjasper (PHP):
Affected version(s) >=v1.3 <=v1.5.1
Fix Suggestion:
Update to version no_fix
lavela/phpjasper (PHP):
Affected version(s) >=v1.3 <v2.0
Fix Suggestion:
Update to version v2.0
smart145/phpjasper (PHP):
Affected version(s) =v1.16 <2.0
Fix Suggestion:
Update to version 2.0
xidmonx/jasperphp (PHP):
Affected version(s) >=v1.0.0 <v2.4.0
Fix Suggestion:
Update to version v2.4.0
smart145/phpjasper (PHP):
Affected version(s) =v1.10 <v1.11
Fix Suggestion:
Update to version v1.11
stesabvba/horizon (PHP):
Affected version(s) =dev-master
Fix Suggestion:
Update to version no_fix
myparkfolio/jars-jasper-report (PHP):
Affected version(s) >=dev-master <=4.7.1
Fix Suggestion:
Update to version no_fix
starkliew/jasperphp (PHP):
Affected version(s) >=v1.0.0 <v2.4.0
Fix Suggestion:
Update to version v2.4.0
salesfusion/reporter (PHP):
Affected version(s) >=1.0.0 <1.1.2
Fix Suggestion:
Update to version 1.1.2
smart145/phpjasper (PHP):
Affected version(s) =v1.4 <v1.5
Fix Suggestion:
Update to version v1.5
a.ambrogini/phpjasper (PHP):
Affected version(s) >=v1.2 <v2.6
Fix Suggestion:
Update to version v2.6
copam/phpjasper (PHP):
Affected version(s) >=v1.0 <1.4
Fix Suggestion:
Update to version 1.4
vufind/vufind (PHP):
Affected version(s) =dev-legacy/vudl <dev-pullrequest_accessib_turn-my-account-menu-into-ul
Fix Suggestion:
Update to version dev-pullrequest_accessib_turn-my-account-menu-into-ul
chrmorandi/yii2-jasper (PHP):
Affected version(s) >=v0.5.0 <v1.1.1
Fix Suggestion:
Update to version v1.1.1
vufind/vufind (PHP):
Affected version(s) >=dev-release-3.0 <v3.1
Fix Suggestion:
Update to version v3.1
Related Resources (1)
https://github.com/apache/poi/commit/7f9f8e9afa8160ef401ec8b3416d36428e928e2f
Do you need more information?
Contact Us
CVSS v4
Base Score:
6.3
Attack Vector
NETWORK
Attack Complexity
HIGH
Attack Requirements
NONE
Privileges Required
NONE
User Interaction
NONE
Vulnerable System Confidentiality
LOW
Vulnerable System Integrity
NONE
Vulnerable System Availability
LOW
Subsequent System Confidentiality
NONE
Subsequent System Integrity
NONE
Subsequent System Availability
NONE
CVSS v3
Base Score:
4.8
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
LOW
Integrity
NONE
Availability
LOW