Vulnerability Spotlight: Antenna House DMC Library Arbitrary Code Execution Flaws
Summary: Cisco Talos disclosed several vulnerabilities in the AntennaHouse DMC library, which is used in various products for web-based document searching and rendering. Discovered by Talos researcher Marcin 'Icewall' Noga, the flaws stem from a failure to correctly parse Microsoft Office documents and could be exploited to achieve arbitrary code execution, with disclosure coordinated with AntennaHouse.
Bottom line: The vulnerable component is a document-rendering library embedded in other vendors' products, so the exposure reaches beyond AntennaHouse itself to every product that ships it. Arbitrary code execution through a malformed Office document is the kind of flaw that turns an ordinary file upload into an intrusion path.
Read the original at Cisco Talos ↗
- Topics
- Vulnerabilities & Patching
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026