high8.8
CVE-2016-8383
An exploitable heap corruption vulnerability exists in the Doc_GetFontTable functionality of AntennaHouse DMC HTMLFilter.
Impact
An exploitable heap corruption vulnerability exists in the Doc_GetFontTable functionality of AntennaHouse DMC HTMLFilter. A specially crafted doc file can cause a heap corruption resulting in arbitrary code execution. An attacker can send/provide malicious doc file to trigger this vulnerability.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Marklogic | Marklogic | Version 8.0-5.5 |