CVE-2017-12626

CVE-2017-12626 describes denial of service vulnerabilities in Apache POI versions prior to 3.17. Attackers can trigger infinite loops by crafting WMF, EMF, MSG, or macro files, or cause out-of-memory exceptions with specially crafted DOC, PPT, or XLS files. This vulnerability carries a CVSS score of 7.5 (HIGH), indicating a network-based attack with low complexity, requiring no user interaction, and leading to high availability impact. Despite its severity, there is no evidence of active exploitation, publicly available exploit code, or significant community discussion or media coverage.