Vulnerability DatabaseWS-2016-7061
Mend.io Vulnerability Database
The largest open source vulnerability database
What is a Vulnerability ID?
New vulnerability? Tell us about it!
WS-2016-7061
Published:May 14, 2026
Updated:May 14, 2026
Apache POI before 3.16-beta1 is vulnerable to bufferoverflow attack due to lack of length sanity check for length of embedded OLE10Native.
Affected Packages
openrefine (CONDA):
Affected version(s) =2.7 <3.4
Fix Suggestion:
Update to version 3.4
eoulsan (CONDA):
Affected version(s) =2.0_beta4 <2.2
Fix Suggestion:
Update to version 2.2
dia_umpire (CONDA):
Affected version(s) >=2.1.2 <=2.1.6
Fix Suggestion:
Update to version no_fix
peptide-shaker (CONDA):
Affected version(s) >=1.1.3 <1.16.26
Fix Suggestion:
Update to version 1.16.26
searchgui (CONDA):
Affected version(s) >=2.1.4 <4.0.4
Fix Suggestion:
Update to version 4.0.4
metanovo (CONDA):
Affected version(s) =1.9.4
Fix Suggestion:
Update to version no_fix
pepquery (CONDA):
Affected version(s) >=1.2.0 <2.0.2
Fix Suggestion:
Update to version 2.0.2
peptide-shaker (CONDA):
Affected version(s) >=1.16.29 <2.0.5
Fix Suggestion:
Update to version 2.0.5
r-xlsxjars (CONDA):
Affected version(s) =0.6.1
Fix Suggestion:
Update to version no_fix
mpa-portable (CONDA):
Affected version(s) >=1.9.0 <=2.0.0
Fix Suggestion:
Update to version no_fix
myparkfolio/jars-jasper-report (PHP):
Affected version(s) >=dev-master <=4.7.1
Fix Suggestion:
Update to version no_fix
salesfusion/reporter (PHP):
Affected version(s) >=1.0.0 <1.1.2
Fix Suggestion:
Update to version 1.1.2
ziack/jasperphp (PHP):
Affected version(s) =dev-development <dev-master
Fix Suggestion:
Update to version dev-master
a.ambrogini/phpjasper (PHP):
Affected version(s) >=v1.2 <v2.6
Fix Suggestion:
Update to version v2.6
starkliew/jasperphp (PHP):
Affected version(s) >=v1.0.0 <v2.4.0
Fix Suggestion:
Update to version v2.4.0
minkbear/phpjasper (PHP):
Affected version(s) >=v1.0 <v2.6
Fix Suggestion:
Update to version v2.6
a.ambrogini/phpjasper (PHP):
Affected version(s) =v1.0 <v1.1
Fix Suggestion:
Update to version v1.1
smart145/phpjasper (PHP):
Affected version(s) =v1.16 <2.0
Fix Suggestion:
Update to version 2.0
smart145/phpjasper (PHP):
Affected version(s) >=v2.2 <v2.6
Fix Suggestion:
Update to version v2.6
copam/phpjasper (PHP):
Affected version(s) >=v1.0 <1.4
Fix Suggestion:
Update to version 1.4
dericktan/phpjasper (PHP):
Affected version(s) >=v1.3 <=v1.5.1
Fix Suggestion:
Update to version no_fix
dericktan/phpjasper (PHP):
Affected version(s) >=dev-master <v1.2
Fix Suggestion:
Update to version v1.2
stesabvba/horizon (PHP):
Affected version(s) =dev-master
Fix Suggestion:
Update to version no_fix
lavela/phpjasper (PHP):
Affected version(s) >=v1.3 <v2.0
Fix Suggestion:
Update to version v2.0
smart145/phpjasper (PHP):
Affected version(s) =v1.0 <v1.1
Fix Suggestion:
Update to version v1.1
vufind/vufind (PHP):
Affected version(s) =dev-feature/foundation5 <dev-release-5.0
Fix Suggestion:
Update to version dev-release-5.0
lavela/phpjasper (PHP):
Affected version(s) =dev-develop <dev-master
Fix Suggestion:
Update to version dev-master
rdpascua/jasperstarter (PHP):
Affected version(s) >=3.1.0 <3.5.0
Fix Suggestion:
Update to version 3.5.0
xidmonx/jasperphp (PHP):
Affected version(s) >=v1.0.0 <v2.4.0
Fix Suggestion:
Update to version v2.4.0
smart145/phpjasper (PHP):
Affected version(s) =v1.4 <v1.5
Fix Suggestion:
Update to version v1.5
copam/phpjasper7 (PHP):
Affected version(s) >=v1.0 <v1.3
Fix Suggestion:
Update to version v1.3
copam/phpjasper7 (PHP):
Affected version(s) =dev-develop <dev-master
Fix Suggestion:
Update to version dev-master
copam/phpjasper (PHP):
Affected version(s) =v1.4 <v1.5
Fix Suggestion:
Update to version v1.5
xidmonx/jasperphp (PHP):
Affected version(s) =dev-development <dev-master
Fix Suggestion:
Update to version dev-master
chrmorandi/yii2-jasper (PHP):
Affected version(s) >=v0.5.0 <v1.1.1
Fix Suggestion:
Update to version v1.1.1
smart145/phpjasper (PHP):
Affected version(s) =v1.10 <v1.11
Fix Suggestion:
Update to version v1.11
i4n/phpjasper (PHP):
Affected version(s) =dev-master <1.1.0
Fix Suggestion:
Update to version 1.1.0
ziack/jasperphp (PHP):
Affected version(s) >=v1.0.0 <v2.4.0
Fix Suggestion:
Update to version v2.4.0
vufind/vufind (PHP):
Affected version(s) =dev-legacy/jquerymobile <dev-legacy/mink-autoretry
Fix Suggestion:
Update to version dev-legacy/mink-autoretry
cossou/jasperphp (PHP):
Affected version(s) >=v1.0.0 <v2.4.0
Fix Suggestion:
Update to version v2.4.0
siu-toba/jasper (PHP):
Affected version(s) >=v5.6 <=v5.6.2
Fix Suggestion:
Update to version no_fix
cossou/jasperphp (PHP):
Affected version(s) =dev-development <dev-master
Fix Suggestion:
Update to version dev-master
fazo96/jasperphp (PHP):
Affected version(s) >=v1.0.0 <=v2.3.0
Fix Suggestion:
Update to version no_fix
smart145/phpjasper (PHP):
Affected version(s) >=v1.6 <v1.8
Fix Suggestion:
Update to version v1.8
vufind/vufind (PHP):
Affected version(s) =dev-legacy/vudl <dev-pullrequest_accessib_turn-my-account-menu-into-ul
Fix Suggestion:
Update to version dev-pullrequest_accessib_turn-my-account-menu-into-ul
vufind/vufind (PHP):
Affected version(s) >=dev-release-3.0 <v3.1
Fix Suggestion:
Update to version v3.1
silverstripe/fulltextsearch-extract (PHP):
Affected version(s) =1.0.0
Fix Suggestion:
Update to version no_fix
myparkfolio/jars-poi (PHP):
Affected version(s) =dev-master
Fix Suggestion:
Update to version no_fix
Related Resources (1)
https://github.com/apache/poi/commit/7f9f8e9afa8160ef401ec8b3416d36428e928e2f
Do you need more information?
Contact Us
CVSS v4
Base Score:
6.3
Attack Vector
NETWORK
Attack Complexity
HIGH
Attack Requirements
NONE
Privileges Required
NONE
User Interaction
NONE
Vulnerable System Confidentiality
LOW
Vulnerable System Integrity
NONE
Vulnerable System Availability
LOW
Subsequent System Confidentiality
NONE
Subsequent System Integrity
NONE
Subsequent System Availability
NONE
CVSS v3
Base Score:
4.8
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
LOW
Integrity
NONE
Availability
LOW