Lucene search

K
cvelistTalosCVELIST:CVE-2017-2910
HistoryDec 02, 2020 - 5:26 p.m.

CVE-2017-2910

2020-12-0217:26:55
talos
www.cve.org
2
exploitable
memory corruption
remote code execution
xls file
attacker
trigger vulnerability

EPSS

0.006

Percentile

79.0%

An exploitable Out-of-bounds Write vulnerability exists in the xls_addCell function of libxls 2.0. A specially crafted xls file can cause a memory corruption resulting in remote code execution. An attacker can send malicious xls file to trigger this vulnerability.

CNA Affected

[
  {
    "product": "libxls",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "libxls 2.0"
      }
    ]
  }
]

EPSS

0.006

Percentile

79.0%

Related for CVELIST:CVE-2017-2910