113 matches found
Gentoo Security Advisory GLSA 200802-05 (gnumeric)
The remote host is missing updates announced in advisory GLSA 200802-05. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
openSUSE 10 Security Update : gnumeric (gnumeric-5393)
Specially crafed xls files could trigger integer overflows in gnumeric that could potentially be exploited to execute arbitrary code CVE-2008-0668. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security...
Ubuntu 6.06 LTS / 6.10 / 7.04 / 7.10 : gnumeric vulnerability (USN-604-1)
Thilo Pfennig and Morten Welinder discovered that the XLS spreadsheet handling code in Gnumeric did not correctly calculate needed memory sizes. If a user or automated system were tricked into loading a specially crafted XLS document, a remote attacker could execute arbitrary code with user...
USN-604-1: Gnumeric vulnerability
Thilo Pfennig and Morten Welinder discovered that the XLS spreadsheet handling code in Gnumeric did not correctly calculate needed memory sizes. If a user or automated system were tricked into loading a specially crafted XLS document, a remote attacker could execute arbitrary code with user...
Debian Security Advisory DSA 1546-1 (gnumeric)
The remote host is missing an update to gnumeric announced via advisory DSA 1546-1. OpenVAS Vulnerability Test $Id: deb15461.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1546-1 gnumeric Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...
Debian: Security Advisory (DSA-1546-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Debian DSA-1546-1 : gnumeric - integer overflow
Thilo Pfennig and Morten Welinder discovered several integer overflow weaknesses in Gnumeric, a GNOME spreadsheet application. These vulnerabilities could result in the execution of arbitrary code through the opening of a maliciously crafted Excel spreadsheet. %NASLMINLEVEL 70300 C Tenable Networ...
[SECURITY] [DSA 1546-1] New gnumeric packages fix arbitrary code execution
------------------------------------------------------------------------ Debian Security Advisory DSA-1546-1 [email protected] http://www.debian.org/security/ Devin Carraway April 10, 2008 http://www.debian.org/security/faq -...
DSA-1546-1 gnumeric
Bulletin has no description...
GLSA-200802-05 : Gnumeric: User-assisted execution of arbitrary code
The remote host is affected by the vulnerability described in GLSA-200802-05 Gnumeric: User-assisted execution of arbitrary code Multiple integer overflow and signedness errors have been reported in the excelreadHLINK function in file plugins/excel/ms-excel-read.c when processing XLS HLINK opcode...
[Full-disclosure] [ GLSA 200802-05 ] Gnumeric: User-assisted execution of arbitrary code
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Gentoo Linux Security Advisory GLSA 200802-05 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - http://security.gentoo.org/ - - - - - - - - - - - - - - -...
Gnumeric buffer overflow
Buffer overflow on .XLS files parsing...
Gnumeric: User-assisted execution of arbitrary code
Background The Gnumeric spreadsheet is a versatile application developed as part of the GNOME Office project. Description Multiple integer overflow and signedness errors have been reported in the excelreadHLINK function in file plugins/excel/ms-excel-read.c when processing XLS HLINK opcodes. Impa...
CVE-2008-0668
The excelreadHLINK function in plugins/excel/ms-excel-read.c in Gnome Office Gnumeric before 1.8.1 allows user-assisted remote attackers to execute arbitrary code via a crafted XLS file containing XLS HLINK opcodes, possibly because of an integer signedness error that leads to an integer overflow...
Integer overflow
The excelreadHLINK function in plugins/excel/ms-excel-read.c in Gnome Office Gnumeric before 1.8.1 allows user-assisted remote attackers to execute arbitrary code via a crafted XLS file containing XLS HLINK opcodes, possibly because of an integer signedness error that leads to an integer overflow...
CVE-2008-0668
The excelreadHLINK function in plugins/excel/ms-excel-read.c in Gnome Office Gnumeric before 1.8.1 allows user-assisted remote attackers to execute arbitrary code via a crafted XLS file containing XLS HLINK opcodes, possibly because of an integer signedness error that leads to an integer overflow...
CVE-2008-0668
The excelreadHLINK function in plugins/excel/ms-excel-read.c in Gnome Office Gnumeric before 1.8.1 allows user-assisted remote attackers to execute arbitrary code via a crafted XLS file containing XLS HLINK opcodes, possibly because of an integer signedness error that leads to an integer overflow...
DEBIAN-CVE-2008-0668
The excelreadHLINK function in plugins/excel/ms-excel-read.c in Gnome Office Gnumeric before 1.8.1 allows user-assisted remote attackers to execute arbitrary code via a crafted XLS file containing XLS HLINK opcodes, possibly because of an integer signedness error that leads to an integer overflow...
CVE-2008-0668
CVE-2008-0668 affects Gnumeric’s Microsoft Excel plugin (excel_read_HLINK) in the gnumeric package prior to version 1.8.1. A crafted XLS file with HLINK opcodes can trigger an integer signedness error that causes an integer overflow, enabling arbitrary code execution by user-assisted remote attac...
CVE-2008-0668
The excelreadHLINK function in plugins/excel/ms-excel-read.c in Gnome Office Gnumeric before 1.8.1 allows user-assisted remote attackers to execute arbitrary code via a crafted XLS file containing XLS HLINK opcodes, possibly because of an integer signedness error that leads to an integer overflow...