CVE-2022-0904

published 2022-03-10

CVE-2022-0904: A stack overflow bug in the document extractor in Mattermost Server in versions up to and including 6.3.2 allows an attacker to crash the server via submitting…

medium 6.5 CVSS 3.1

AV N AC L PR L UI N S U C N I N A H

A stack overflow bug in the document extractor in Mattermost Server in versions up to and including 6.3.2 allows an attacker to crash the server via submitting a maliciously crafted Apple Pages document.

Affected

8 ranges

Vendor	Product	Version range	Fixed in
mattermost	mattermost	>= 5.37 < 5.37.8	5.37.8
mattermost	mattermost	>= 6.1 < 6.1.3	6.1.3
mattermost	mattermost	>= 6.2 < 6.2.3	6.2.3
mattermost	mattermost	>= 6.3 < 6.3.3	6.3.3
mattermost	mattermost_server	>= 5.0.0 < 5.37.8	5.37.8
mattermost	mattermost_server	>= 6.0.0 < 6.1.3	6.1.3
mattermost	mattermost_server	>= 6.2.0 < 6.2.3	6.2.3
mattermost	mattermost_server	>= 6.3.0 < 6.3.3	6.3.3

CWE-787