Lucene search

PRIOn knowledge basePRION:CVE-2023-38854

HistoryAug 15, 2023 - 5:15 p.m.

Buffer overflow

2023-08-1517:15:00

PRIOn knowledge base

www.prio-n.com

buffer overflow

libxlsv.1.6.2

remote attacker

denial of service

crafted xls file

transcode_latin1_to_utf8 function

6.9 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

34.6%

JSON

Buffer Overflow vulnerability in libxlsv.1.6.2 allows a remote attacker to execute arbitrary code and cause a denial of service via a crafted XLS file to the transcode_latin1_to_utf8 function in xlstool.c:296.

CPENameOperatorVersion
libxlseq1.6.2

CPE	Name	Operator	Version
	libxls	eq	1.6.2

References

github.com/libxls/libxls/issues/124