Approved changes feed: RSS · Atom

cpe:2.3:a:antennahouse:office_server_document_converter:6.1:mr2:*:*:pro:*:*:*

part: a version: 6.1 update: mr2

VendorAntennahouse (bc5671b9-1722-5b3a-b9e7-ea8583aca440)
ProductOffice Server Document Converter (8ce15926-4b06-575f-b31c-2c3d227488ba)
Edition*
Language*
Software editionpro
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2021-20839 vulnerable 2026-06-08 05:29:10.633472 Details available
Office Server Document Converter V7.2MR4 and earlier and V7.1MR7 and earlier allows a remote unauthenticated attacker to conduct an XML External Entity (XXE) attack to cause a denial of service (DoS) condition to the other servers by processing a specially crafted XML document.
Published: 2021-11-01T01:50:16.000Z
Updated: 2024-08-03T17:53:22.634Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-20838 vulnerable 2026-06-08 05:29:10.624252 Details available
Office Server Document Converter V7.2MR4 and earlier and V7.1MR7 and earlier allows a remote unauthenticated attacker to conduct an XML External Entity (XXE) attack to cause a denial of service (DoS) condition by processing a specially crafted XML document.
Published: 2021-11-01T01:50:14.000Z
Updated: 2024-08-03T17:53:22.724Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-3936 vulnerable 2026-06-08 05:11:41.432664 Details available
HIGH (8.8)
In Antenna House Office Server Document Converter version V6.1 Pro MR2 for Linux64 (6,1,2018,0312), a crafted Microsoft Word (DOC) document can lead to an out-of-bounds write, resulting in remote code execution.
Published: 2018-07-11T16:00:00.000Z
Updated: 2024-09-17T03:14:11.681Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-3933 vulnerable 2026-06-08 05:11:41.431500 Details available
HIGH (8.8)
An exploitable out-of-bounds write exists in the Microsoft Word document conversion functionality of the Antenna House Office Server Document Converter version V6.1 Pro MR2 for Linux64 (6,1,2018,0312). A crafted Microsoft Word (DOC) document can lead to an out-of-bounds write, resulting in remote code execution. This vulnerability occurs in the `vbputanld` method.
Published: 2018-07-11T16:00:00.000Z
Updated: 2024-09-17T01:26:20.381Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-3932 vulnerable 2026-06-08 05:11:41.431062 Details available
HIGH (8.8)
An exploitable stack-based buffer overflow exists in the Microsoft Word document conversion functionality of the Antenna House Office Server Document Converter version V6.1 Pro MR2 for Linux64 (6,1,2018,0312). A crafted Microsoft Word (DOC) document can lead to a stack-based buffer overflow, resulting in remote code execution.
Published: 2018-07-11T16:00:00.000Z
Updated: 2024-09-16T16:54:07.605Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-3931 vulnerable 2026-06-08 05:11:41.430693 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-3930 vulnerable 2026-06-08 05:11:41.430123 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-3929 vulnerable 2026-06-08 05:11:41.429656 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.