Vulnerability DatabaseWS-2016-7061
Mend.io Vulnerability Database
The largest open source vulnerability database
What is a Vulnerability ID?
New vulnerability? Tell us about it!
WS-2016-7061
Published:May 19, 2026
Updated:May 19, 2026
Apache POI before 3.16-beta1 is vulnerable to bufferoverflow attack due to lack of length sanity check for length of embedded OLE10Native.
Affected Packages
eoulsan (CONDA):
Affected version(s) =2.0_beta4 <2.2
Fix Suggestion:
Update to version 2.2
r-xlsxjars (CONDA):
Affected version(s) =0.6.1
Fix Suggestion:
Update to version no_fix
searchgui (CONDA):
Affected version(s) >=2.1.4 <4.0.4
Fix Suggestion:
Update to version 4.0.4
peptide-shaker (CONDA):
Affected version(s) >=1.1.3 <1.16.26
Fix Suggestion:
Update to version 1.16.26
peptide-shaker (CONDA):
Affected version(s) >=1.16.29 <2.0.5
Fix Suggestion:
Update to version 2.0.5
openrefine (CONDA):
Affected version(s) =2.7 <3.4
Fix Suggestion:
Update to version 3.4
pepquery (CONDA):
Affected version(s) >=1.2.0 <2.0.2
Fix Suggestion:
Update to version 2.0.2
metanovo (CONDA):
Affected version(s) =1.9.4
Fix Suggestion:
Update to version no_fix
dia_umpire (CONDA):
Affected version(s) >=2.1.2 <=2.1.6
Fix Suggestion:
Update to version no_fix
mpa-portable (CONDA):
Affected version(s) >=1.9.0 <=2.0.0
Fix Suggestion:
Update to version no_fix
myparkfolio/jars-jasper-report (PHP):
Affected version(s) >=dev-master <=4.7.1
Fix Suggestion:
Update to version no_fix
starkliew/jasperphp (PHP):
Affected version(s) >=v1.0.0 <v2.4.0
Fix Suggestion:
Update to version v2.4.0
vufind/vufind (PHP):
Affected version(s) =dev-feature/foundation5 <dev-release-5.0
Fix Suggestion:
Update to version dev-release-5.0
xidmonx/jasperphp (PHP):
Affected version(s) >=v1.0.0 <v2.4.0
Fix Suggestion:
Update to version v2.4.0
siu-toba/jasper (PHP):
Affected version(s) >=v5.6 <=v5.6.2
Fix Suggestion:
Update to version no_fix
copam/phpjasper (PHP):
Affected version(s) >=v1.0 <1.4
Fix Suggestion:
Update to version 1.4
smart145/phpjasper (PHP):
Affected version(s) =v1.4 <v1.5
Fix Suggestion:
Update to version v1.5
dericktan/phpjasper (PHP):
Affected version(s) >=v1.3 <=v1.5.1
Fix Suggestion:
Update to version no_fix
copam/phpjasper (PHP):
Affected version(s) =v1.4 <v1.5
Fix Suggestion:
Update to version v1.5
a.ambrogini/phpjasper (PHP):
Affected version(s) >=v1.2 <v2.6
Fix Suggestion:
Update to version v2.6
vufind/vufind (PHP):
Affected version(s) =dev-legacy/jquerymobile <dev-legacy/mink-autoretry
Fix Suggestion:
Update to version dev-legacy/mink-autoretry
copam/phpjasper7 (PHP):
Affected version(s) >=v1.0 <v1.3
Fix Suggestion:
Update to version v1.3
cossou/jasperphp (PHP):
Affected version(s) >=v1.0.0 <v2.4.0
Fix Suggestion:
Update to version v2.4.0
salesfusion/reporter (PHP):
Affected version(s) >=1.0.0 <1.1.2
Fix Suggestion:
Update to version 1.1.2
fazo96/jasperphp (PHP):
Affected version(s) >=v1.0.0 <=v2.3.0
Fix Suggestion:
Update to version no_fix
ziack/jasperphp (PHP):
Affected version(s) >=v1.0.0 <v2.4.0
Fix Suggestion:
Update to version v2.4.0
silverstripe/fulltextsearch-extract (PHP):
Affected version(s) =1.0.0
Fix Suggestion:
Update to version no_fix
vufind/vufind (PHP):
Affected version(s) >=dev-release-3.0 <v3.1
Fix Suggestion:
Update to version v3.1
vufind/vufind (PHP):
Affected version(s) =dev-legacy/vudl <dev-pullrequest_accessib_turn-my-account-menu-into-ul
Fix Suggestion:
Update to version dev-pullrequest_accessib_turn-my-account-menu-into-ul
i4n/phpjasper (PHP):
Affected version(s) =dev-master <1.1.0
Fix Suggestion:
Update to version 1.1.0
cossou/jasperphp (PHP):
Affected version(s) =dev-development <dev-master
Fix Suggestion:
Update to version dev-master
lavela/phpjasper (PHP):
Affected version(s) >=v1.3 <v2.0
Fix Suggestion:
Update to version v2.0
chrmorandi/yii2-jasper (PHP):
Affected version(s) >=v0.5.0 <v1.1.1
Fix Suggestion:
Update to version v1.1.1
smart145/phpjasper (PHP):
Affected version(s) >=v2.2 <v2.6
Fix Suggestion:
Update to version v2.6
smart145/phpjasper (PHP):
Affected version(s) =v1.16 <2.0
Fix Suggestion:
Update to version 2.0
ziack/jasperphp (PHP):
Affected version(s) =dev-development <dev-master
Fix Suggestion:
Update to version dev-master
lavela/phpjasper (PHP):
Affected version(s) =dev-develop <dev-master
Fix Suggestion:
Update to version dev-master
minkbear/phpjasper (PHP):
Affected version(s) >=v1.0 <v2.6
Fix Suggestion:
Update to version v2.6
copam/phpjasper7 (PHP):
Affected version(s) =dev-develop <dev-master
Fix Suggestion:
Update to version dev-master
smart145/phpjasper (PHP):
Affected version(s) =v1.0 <v1.1
Fix Suggestion:
Update to version v1.1
rdpascua/jasperstarter (PHP):
Affected version(s) >=3.1.0 <3.5.0
Fix Suggestion:
Update to version 3.5.0
myparkfolio/jars-poi (PHP):
Affected version(s) =dev-master
Fix Suggestion:
Update to version no_fix
a.ambrogini/phpjasper (PHP):
Affected version(s) =v1.0 <v1.1
Fix Suggestion:
Update to version v1.1
xidmonx/jasperphp (PHP):
Affected version(s) =dev-development <dev-master
Fix Suggestion:
Update to version dev-master
smart145/phpjasper (PHP):
Affected version(s) =v1.10 <v1.11
Fix Suggestion:
Update to version v1.11
smart145/phpjasper (PHP):
Affected version(s) >=v1.6 <v1.8
Fix Suggestion:
Update to version v1.8
dericktan/phpjasper (PHP):
Affected version(s) >=dev-master <v1.2
Fix Suggestion:
Update to version v1.2
stesabvba/horizon (PHP):
Affected version(s) =dev-master
Fix Suggestion:
Update to version no_fix
Related Resources (1)
https://github.com/apache/poi/commit/7f9f8e9afa8160ef401ec8b3416d36428e928e2f
Do you need more information?
Contact Us
CVSS v4
Base Score:
6.3
Attack Vector
NETWORK
Attack Complexity
HIGH
Attack Requirements
NONE
Privileges Required
NONE
User Interaction
NONE
Vulnerable System Confidentiality
LOW
Vulnerable System Integrity
NONE
Vulnerable System Availability
LOW
Subsequent System Confidentiality
NONE
Subsequent System Integrity
NONE
Subsequent System Availability
NONE
CVSS v3
Base Score:
4.8
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
LOW
Integrity
NONE
Availability
LOW