Vulnerability DatabaseWS-2016-7061
Mend.io Vulnerability Database
The largest open source vulnerability database
What is a Vulnerability ID?
New vulnerability? Tell us about it!
WS-2016-7061
Published:May 19, 2026
Updated:May 19, 2026
Apache POI before 3.16-beta1 is vulnerable to bufferoverflow attack due to lack of length sanity check for length of embedded OLE10Native.
Affected Packages
openrefine (CONDA):
Affected version(s) =2.7 <3.4
Fix Suggestion:
Update to version 3.4
r-xlsxjars (CONDA):
Affected version(s) =0.6.1
Fix Suggestion:
Update to version no_fix
searchgui (CONDA):
Affected version(s) >=2.1.4 <4.0.4
Fix Suggestion:
Update to version 4.0.4
metanovo (CONDA):
Affected version(s) =1.9.4
Fix Suggestion:
Update to version no_fix
peptide-shaker (CONDA):
Affected version(s) >=1.16.29 <2.0.5
Fix Suggestion:
Update to version 2.0.5
mpa-portable (CONDA):
Affected version(s) >=1.9.0 <=2.0.0
Fix Suggestion:
Update to version no_fix
eoulsan (CONDA):
Affected version(s) =2.0_beta4 <2.2
Fix Suggestion:
Update to version 2.2
peptide-shaker (CONDA):
Affected version(s) >=1.1.3 <1.16.26
Fix Suggestion:
Update to version 1.16.26
pepquery (CONDA):
Affected version(s) >=1.2.0 <2.0.2
Fix Suggestion:
Update to version 2.0.2
dia_umpire (CONDA):
Affected version(s) >=2.1.2 <=2.1.6
Fix Suggestion:
Update to version no_fix
vufind/vufind (PHP):
Affected version(s) =dev-legacy/jquerymobile <dev-legacy/mink-autoretry
Fix Suggestion:
Update to version dev-legacy/mink-autoretry
vufind/vufind (PHP):
Affected version(s) >=dev-release-3.0 <v3.1
Fix Suggestion:
Update to version v3.1
a.ambrogini/phpjasper (PHP):
Affected version(s) =v1.0 <v1.1
Fix Suggestion:
Update to version v1.1
starkliew/jasperphp (PHP):
Affected version(s) >=v1.0.0 <v2.4.0
Fix Suggestion:
Update to version v2.4.0
fazo96/jasperphp (PHP):
Affected version(s) >=v1.0.0 <=v2.3.0
Fix Suggestion:
Update to version no_fix
vufind/vufind (PHP):
Affected version(s) =dev-feature/foundation5 <dev-release-5.0
Fix Suggestion:
Update to version dev-release-5.0
salesfusion/reporter (PHP):
Affected version(s) >=1.0.0 <1.1.2
Fix Suggestion:
Update to version 1.1.2
smart145/phpjasper (PHP):
Affected version(s) =v1.0 <v1.1
Fix Suggestion:
Update to version v1.1
dericktan/phpjasper (PHP):
Affected version(s) >=v1.3 <=v1.5.1
Fix Suggestion:
Update to version no_fix
rdpascua/jasperstarter (PHP):
Affected version(s) >=3.1.0 <3.5.0
Fix Suggestion:
Update to version 3.5.0
copam/phpjasper (PHP):
Affected version(s) >=v1.0 <1.4
Fix Suggestion:
Update to version 1.4
lavela/phpjasper (PHP):
Affected version(s) =dev-develop <dev-master
Fix Suggestion:
Update to version dev-master
myparkfolio/jars-jasper-report (PHP):
Affected version(s) >=dev-master <=4.7.1
Fix Suggestion:
Update to version no_fix
dericktan/phpjasper (PHP):
Affected version(s) >=dev-master <v1.2
Fix Suggestion:
Update to version v1.2
ziack/jasperphp (PHP):
Affected version(s) >=v1.0.0 <v2.4.0
Fix Suggestion:
Update to version v2.4.0
cossou/jasperphp (PHP):
Affected version(s) =dev-development <dev-master
Fix Suggestion:
Update to version dev-master
myparkfolio/jars-poi (PHP):
Affected version(s) =dev-master
Fix Suggestion:
Update to version no_fix
i4n/phpjasper (PHP):
Affected version(s) =dev-master <1.1.0
Fix Suggestion:
Update to version 1.1.0
cossou/jasperphp (PHP):
Affected version(s) >=v1.0.0 <v2.4.0
Fix Suggestion:
Update to version v2.4.0
siu-toba/jasper (PHP):
Affected version(s) >=v5.6 <=v5.6.2
Fix Suggestion:
Update to version no_fix
smart145/phpjasper (PHP):
Affected version(s) >=v1.6 <v1.8
Fix Suggestion:
Update to version v1.8
smart145/phpjasper (PHP):
Affected version(s) =v1.4 <v1.5
Fix Suggestion:
Update to version v1.5
copam/phpjasper7 (PHP):
Affected version(s) >=v1.0 <v1.3
Fix Suggestion:
Update to version v1.3
smart145/phpjasper (PHP):
Affected version(s) >=v2.2 <v2.6
Fix Suggestion:
Update to version v2.6
lavela/phpjasper (PHP):
Affected version(s) >=v1.3 <v2.0
Fix Suggestion:
Update to version v2.0
stesabvba/horizon (PHP):
Affected version(s) =dev-master
Fix Suggestion:
Update to version no_fix
silverstripe/fulltextsearch-extract (PHP):
Affected version(s) =1.0.0
Fix Suggestion:
Update to version no_fix
copam/phpjasper (PHP):
Affected version(s) =v1.4 <v1.5
Fix Suggestion:
Update to version v1.5
vufind/vufind (PHP):
Affected version(s) =dev-legacy/vudl <dev-pullrequest_accessib_turn-my-account-menu-into-ul
Fix Suggestion:
Update to version dev-pullrequest_accessib_turn-my-account-menu-into-ul
xidmonx/jasperphp (PHP):
Affected version(s) =dev-development <dev-master
Fix Suggestion:
Update to version dev-master
xidmonx/jasperphp (PHP):
Affected version(s) >=v1.0.0 <v2.4.0
Fix Suggestion:
Update to version v2.4.0
smart145/phpjasper (PHP):
Affected version(s) =v1.10 <v1.11
Fix Suggestion:
Update to version v1.11
chrmorandi/yii2-jasper (PHP):
Affected version(s) >=v0.5.0 <v1.1.1
Fix Suggestion:
Update to version v1.1.1
copam/phpjasper7 (PHP):
Affected version(s) =dev-develop <dev-master
Fix Suggestion:
Update to version dev-master
smart145/phpjasper (PHP):
Affected version(s) =v1.16 <2.0
Fix Suggestion:
Update to version 2.0
minkbear/phpjasper (PHP):
Affected version(s) >=v1.0 <v2.6
Fix Suggestion:
Update to version v2.6
a.ambrogini/phpjasper (PHP):
Affected version(s) >=v1.2 <v2.6
Fix Suggestion:
Update to version v2.6
ziack/jasperphp (PHP):
Affected version(s) =dev-development <dev-master
Fix Suggestion:
Update to version dev-master
Related Resources (1)
https://github.com/apache/poi/commit/7f9f8e9afa8160ef401ec8b3416d36428e928e2f
Do you need more information?
Contact Us
CVSS v4
Base Score:
6.3
Attack Vector
NETWORK
Attack Complexity
HIGH
Attack Requirements
NONE
Privileges Required
NONE
User Interaction
NONE
Vulnerable System Confidentiality
LOW
Vulnerable System Integrity
NONE
Vulnerable System Availability
LOW
Subsequent System Confidentiality
NONE
Subsequent System Integrity
NONE
Subsequent System Availability
NONE
CVSS v3
Base Score:
4.8
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
LOW
Integrity
NONE
Availability
LOW