CVE-2020-27819

2021-02-2303:40:01

CWE-476

redhat

www.cve.org

libxls

excel

null pointer

denial of service

xls file

AI Score

5.2

Confidence

High

EPSS

0.001

Percentile

30.2%

JSON

An issue was discovered in libxls before and including 1.6.1 when reading Microsoft Excel files. A NULL pointer dereference vulnerability exists when parsing XLS cells in libxls/xls2csv.c:199. It could allow a remote attacker to cause a denial of service via crafted XLS file.

CNA Affected

[
  {
    "product": "libxls",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "libxls before 1.6.2"
      }
    ]
  }
]