Updated gnome-chemistry-utils, gnumeric and goffice packages fix security vulnerability

2014-02-2122:06:56

Gentoo Foundation

advisories.mageia.org

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

0.016 Low

EPSS

Percentile

87.6%

JSON

Heap-based buffer overflow in the ms_escher_get_data function in plugins/excel/ms-escher.c in GNOME Office Gnumeric before 1.12.9 allows remote attackers to cause a denial of service (crash) via a crafted xls file with a crafted length value. (CVE-2013-6836)

OSVersionArchitecturePackageVersionFilename
Mageia3noarchgnome-chemistry-utils< 0.14.5-1gnome-chemistry-utils-0.14.5-1.mga3
Mageia3noarchgnumeric< 1.12.9-1gnumeric-1.12.9-1.mga3
Mageia3noarchgoffice< 0.10.9-1goffice-0.10.9-1.mga3

OS	Version	Architecture	Package	Version	Filename
Mageia	3	noarch	gnome-chemistry-utils	< 0.14.5-1	gnome-chemistry-utils-0.14.5-1.mga3
Mageia	3	noarch	gnumeric	< 1.12.9-1	gnumeric-1.12.9-1.mga3
Mageia	3	noarch	goffice	< 0.10.9-1	goffice-0.10.9-1.mga3