cnvd - cnvd-2017-36203

cnvd-2017-36203

Vulnerability from cnvd

Title: iText XML外部实体漏洞

Description:

iText是一个软件开发工具包，允许用户将PDF功能集成到其应用程序、流程或产品中。

5.5.12之前和7.0.3之前的7.x版本的iText存在XML外部实体注入漏洞。该漏洞产生的原因是iText中的XML解析器不禁用外部实体。攻击者可通过特制PDF进行XML外部实体（XXE）攻击。

Severity: 中

Patch Name: iText XML外部实体漏洞的补丁

Patch Description:

iText是一个软件开发工具包，允许用户将PDF功能集成到其应用程序、流程或产品中。

5.5.12之前和7.0.3之前的7.x版本的iText存在XML外部实体注入漏洞。该漏洞产生的原因是iText中的XML解析器不禁用外部实体。攻击者可通过特制PDF进行XML外部实体（XXE）攻击。目前，供应商发布了安全公告及相关补丁信息，修复了此漏洞。

Formal description:

厂商已发布漏洞修复程序，请及时关注更新： https://www.compass-security.com/fileadmin/Datein/Research/Advisories/CSNC-2017-017_itext_xml_external_entity_attack.txt

Reference: https://nvd.nist.gov/vuln/detail/CVE-2017-9096

Impacted products

Name
['iText iText <5.5.12', 'iText iText 7.*，<7.0.3']

Show details on source website

JSON

To clipboard

{
  "cves": {
    "cve": {
      "cveNumber": "CVE-2017-9096"
    }
  },
  "description": "iText\u662f\u4e00\u4e2a\u8f6f\u4ef6\u5f00\u53d1\u5de5\u5177\u5305\uff0c\u5141\u8bb8\u7528\u6237\u5c06PDF\u529f\u80fd\u96c6\u6210\u5230\u5176\u5e94\u7528\u7a0b\u5e8f\u3001\u6d41\u7a0b\u6216\u4ea7\u54c1\u4e2d\u3002\r\n\r\n5.5.12\u4e4b\u524d\u548c7.0.3\u4e4b\u524d\u76847.x\u7248\u672c\u7684iText\u5b58\u5728XML\u5916\u90e8\u5b9e\u4f53\u6ce8\u5165\u6f0f\u6d1e\u3002\u8be5\u6f0f\u6d1e\u4ea7\u751f\u7684\u539f\u56e0\u662fiText\u4e2d\u7684XML\u89e3\u6790\u5668\u4e0d\u7981\u7528\u5916\u90e8\u5b9e\u4f53\u3002\u653b\u51fb\u8005\u53ef\u901a\u8fc7\u7279\u5236PDF\u8fdb\u884cXML\u5916\u90e8\u5b9e\u4f53\uff08XXE\uff09\u653b\u51fb\u3002",
  "discovererName": "iText",
  "formalWay": "\u5382\u5546\u5df2\u53d1\u5e03\u6f0f\u6d1e\u4fee\u590d\u7a0b\u5e8f\uff0c\u8bf7\u53ca\u65f6\u5173\u6ce8\u66f4\u65b0\uff1a\r\nhttps://www.compass-security.com/fileadmin/Datein/Research/Advisories/CSNC-2017-017_itext_xml_external_entity_attack.txt",
  "isEvent": "\u901a\u7528\u8f6f\u786c\u4ef6\u6f0f\u6d1e",
  "number": "CNVD-2017-36203",
  "openTime": "2017-12-05",
  "patchDescription": "iText\u662f\u4e00\u4e2a\u8f6f\u4ef6\u5f00\u53d1\u5de5\u5177\u5305\uff0c\u5141\u8bb8\u7528\u6237\u5c06PDF\u529f\u80fd\u96c6\u6210\u5230\u5176\u5e94\u7528\u7a0b\u5e8f\u3001\u6d41\u7a0b\u6216\u4ea7\u54c1\u4e2d\u3002\r\n\r\n5.5.12\u4e4b\u524d\u548c7.0.3\u4e4b\u524d\u76847.x\u7248\u672c\u7684iText\u5b58\u5728XML\u5916\u90e8\u5b9e\u4f53\u6ce8\u5165\u6f0f\u6d1e\u3002\u8be5\u6f0f\u6d1e\u4ea7\u751f\u7684\u539f\u56e0\u662fiText\u4e2d\u7684XML\u89e3\u6790\u5668\u4e0d\u7981\u7528\u5916\u90e8\u5b9e\u4f53\u3002\u653b\u51fb\u8005\u53ef\u901a\u8fc7\u7279\u5236PDF\u8fdb\u884cXML\u5916\u90e8\u5b9e\u4f53\uff08XXE\uff09\u653b\u51fb\u3002\u76ee\u524d\uff0c\u4f9b\u5e94\u5546\u53d1\u5e03\u4e86\u5b89\u5168\u516c\u544a\u53ca\u76f8\u5173\u8865\u4e01\u4fe1\u606f\uff0c\u4fee\u590d\u4e86\u6b64\u6f0f\u6d1e\u3002",
  "patchName": "iText XML\u5916\u90e8\u5b9e\u4f53\u6f0f\u6d1e\u7684\u8865\u4e01",
  "products": {
    "product": [
      "iText iText \u003c5.5.12",
      "iText iText 7.*\uff0c\u003c7.0.3"
    ]
  },
  "referenceLink": "https://nvd.nist.gov/vuln/detail/CVE-2017-9096",
  "serverity": "\u4e2d",
  "submitTime": "2017-11-07",
  "title": "iText XML\u5916\u90e8\u5b9e\u4f53\u6f0f\u6d1e"
}

CVE-2017-9096 (GCVE-0-2017-9096)

Vulnerability from cvelistv5

Published

2017-11-08 16:00

Modified

2024-08-05 16:55

Severity ?

CWE

Summary

The XML parsers in iText before 5.5.12 and 7.x before 7.0.3 do not disable external entities, which might allow remote attackers to conduct XML external entity (XXE) attacks via a crafted PDF.

References

▼	URL	Tags
	http://www.securityfocus.com/archive/1/541483/100/0/threaded	mailing-list, x_refsource_BUGTRAQ
	https://www.oracle.com/security-alerts/cpuoct2020.html	x_refsource_MISC
	https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03902en_us	x_refsource_CONFIRM
	https://www.compass-security.com/fileadmin/Datein/Research/Advisories/CSNC-2017-017_itext_xml_external_entity_attack.txt	x_refsource_MISC

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T16:55:21.943Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "20171106 CVE-2017-9096 iText XML External Entity Vulnerability",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/archive/1/541483/100/0/threaded"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://www.oracle.com/security-alerts/cpuoct2020.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-hpesbhf03902en_us"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://www.compass-security.com/fileadmin/Datein/Research/Advisories/CSNC-2017-017_itext_xml_external_entity_attack.txt"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2017-11-06T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "The XML parsers in iText before 5.5.12 and 7.x before 7.0.3 do not disable external entities, which might allow remote attackers to conduct XML external entity (XXE) attacks via a crafted PDF."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2020-10-20T21:14:52",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "20171106 CVE-2017-9096 iText XML External Entity Vulnerability",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "http://www.securityfocus.com/archive/1/541483/100/0/threaded"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://www.oracle.com/security-alerts/cpuoct2020.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-hpesbhf03902en_us"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://www.compass-security.com/fileadmin/Datein/Research/Advisories/CSNC-2017-017_itext_xml_external_entity_attack.txt"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2017-9096",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "The XML parsers in iText before 5.5.12 and 7.x before 7.0.3 do not disable external entities, which might allow remote attackers to conduct XML external entity (XXE) attacks via a crafted PDF."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "20171106 CVE-2017-9096 iText XML External Entity Vulnerability",
              "refsource": "BUGTRAQ",
              "url": "http://www.securityfocus.com/archive/1/541483/100/0/threaded"
            },
            {
              "name": "https://www.oracle.com/security-alerts/cpuoct2020.html",
              "refsource": "MISC",
              "url": "https://www.oracle.com/security-alerts/cpuoct2020.html"
            },
            {
              "name": "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-hpesbhf03902en_us",
              "refsource": "CONFIRM",
              "url": "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-hpesbhf03902en_us"
            },
            {
              "name": "https://www.compass-security.com/fileadmin/Datein/Research/Advisories/CSNC-2017-017_itext_xml_external_entity_attack.txt",
              "refsource": "MISC",
              "url": "https://www.compass-security.com/fileadmin/Datein/Research/Advisories/CSNC-2017-017_itext_xml_external_entity_attack.txt"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2017-9096",
    "datePublished": "2017-11-08T16:00:00",
    "dateReserved": "2017-05-19T00:00:00",
    "dateUpdated": "2024-08-05T16:55:21.943Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
Confirmed: The vulnerability is confirmed from an analyst perspective.
Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
Patched: This vulnerability was successfully patched by the user reporting the sighting.
Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
Not confirmed: The user expresses doubt about the veracity of the vulnerability.
Not patched: This vulnerability was not successfully patched by the user reporting the sighting.

Action not permitted