DSA-3976-1 freexl - security update

Bulletin has no description...

Debian: Security Advisory (DSA-3976-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

FreeXL Fixes Two RCE Vulnerabilities

Researchers warned Monday of two remote code execution vulnerabilities in an open source C library that could let an attacker execute code with local user privileges. The library, FreeXL, was updated last week to fix the issues. It allows users to extract valid data from within an Excel .xls...

Remote Code Execution (RCE) Through Heap-based Buffer Overflow

freexl is vulnerable to remote code execution RCE Through heap based buffer overflow. The library does not check the content and dimension of the XLS files input to the readbiffnextrecord function, allowing the vulnerability to be triggered when a malicious XLS file is passed to the application...

Remote Code Execution (RCE) Via Heap-based Buffer Overflow Vulnerability

freexl is vulnerable to remote code execution RCE via heap based buffer overflow. The attackers can get full control over the heap overflow since it does not check the content and dimension of the XLS files input to the readlegacybiff function. The vulnerability can be triggered only when malicio...

FreeXL BIFF Dimension Marker Code Execution Vulnerability(CVE-2017-2924)

Summary An exploitable heap-based buffer overflow vulnerability exists in the readlegacybiff function of FreeXL 1.0.3. A specially crafted XLS file can cause a memory corruption resulting in remote code execution. An attacker can send malicious XLS file to trigger this vulnerability. Tested...

FreeXL read_biff_next_record Code Execution Vulnerability(CVE-2017-2923)

Summary An exploitable heap based buffer overflow vulnerability exists in the readbiffnextrecord function of FreeXL 1.0.3. A specially crafted XLS file can cause a memory corruption resulting in remote code execution. An attacker can send malicious XLS file to trigger this vulnerability. Tested...

Vulnerability Spotlight: TALOS-2017-0430/0431: Multiple Vulnerabilities in FreeXL Library

Vulnerability discovered by Marcin Noga of Cisco TalosOverviewTalos has discovered two remote code execution vulnerabilities in the the FreeXL library. FreeXL is an open source C library to extract valid data from within an Excel .xls spreadsheet. Exploiting these vulnerabilities can potentially...

Multiple exploitable heap-based buffer overflow vulnerabilities exists in FreeXL 1.0.3

Cisco TALOS reports: An exploitable heap based buffer overflow vulnerability exists in the readbiffnextrecord function of FreeXL 1.0.3. A specially crafted XLS file can cause a memory corruption resulting in remote code execution. An attacker can send malicious XLS file to trigger this...

FreeXL read_biff_next_record Code Execution Vulnerability

Summary An exploitable heap based buffer overflow vulnerability exists in the readbiffnextrecord function of FreeXL 1.0.3. A specially crafted XLS file can cause a memory corruption resulting in remote code execution. An attacker can send malicious XLS file to trigger this vulnerability. Tested...

GLSA-201606-15 : FreeXL: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-201606-15 FreeXL: Multiple vulnerabilities FreeXLs shared strings and workbook functions are vulnerable to the remote execution of arbitrary code and Denial of Service. This can be achieved through specially crafted workbooks from...

FreeXL: Multiple vulnerabilities

Background FreeXL is an open source library to extract valid data from within an Excel .xls spreadsheet. Description FreeXL’s shared strings and workbook functions are vulnerable to the remote execution of arbitrary code and Denial of Service. This can be achieved through specially crafted...

FreeXL存在多个远程代码执行漏洞

No description provided by source...

Multiple Remote Code Execution Vulnerabilities in FreeXL

FreeXL is an open source library for extracting valid data from Excel .xls spreadsheets developed by software developer Alessandro Furieri. FreeXL suffers from multiple remote code execution vulnerabilities. This vulnerability could be exploited by an attacker to execute arbitrary code or cause a...

[SECURITY] [DSA 3208-2] freexl regression update

------------------------------------------------------------------------- Debian Security Advisory DSA-3208-2 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso November 14, 2015 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3208-2] freexl regression update

------------------------------------------------------------------------- Debian Security Advisory DSA-3208-2 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso November 14, 2015 https://www.debian.org/security/faq -...

DSA-3208-2 freexl - regression update

Bulletin has no description...

FreeBSD : freexl -- multiple vulnerabilities (ac98d090-45cc-11e5-adde-14dae9d210b8)

Jodie Cunningham reports : 1: A flaw was found in the way FreeXL reads sectors from the input file. A specially crafted file could possibly result in stack corruption near freexl.c:3752. 2: A flaw was found in the function allocatecells. A specially crafted file with invalid workbook dimensions...

FreeBSD : freexl -- integer overflow (a59e263a-45cd-11e5-adde-14dae9d210b8)

Stefan Cornelius reports : There's an integer overflow in the allocatecells function when trying to allocate the memory for worksheet with specially crafted row/column dimensions. This can be exploited to cause a heap memory corruption. The most likely outcome of this is a crash when trying to...

FreeXL Excel File Parsing Integer Overflow Vulnerability

FreeXL is an open source library for extracting valid data from Excel .xls spreadsheets developed by software developer Alessandro Furieri. An integer overflow vulnerability exists in FreeXL, which arises from the program failing to perform proper bounds checking on user-submitted input. An...