UBUNTU-CVE-2020-27819

An issue was discovered in libxls before and including 1.6.1 when reading Microsoft Excel files. A NULL pointer dereference vulnerability exists when parsing XLS cells in libxls/xls2csv.c:199. It could allow a remote attacker to cause a denial of service via crafted XLS file...

CVE-2020-27819

The CVE-2020-27819 issue affects libxls up to version 1.6.1, where a NULL pointer dereference can occur while parsing XLS cells in libxls/xls2csv.c:199, potentially allowing a remote attacker to cause a denial of service when processing crafted Excel files. Public advisories indicate the fix is i...

CVE-2020-27819

An issue was discovered in libxls before and including 1.6.1 when reading Microsoft Excel files. A NULL pointer dereference vulnerability exists when parsing XLS cells in libxls/xls2csv.c:199. It could allow a remote attacker to cause a denial of service via crafted XLS file...

CVE-2020-27819

An issue was discovered in libxls before and including 1.6.1 when reading Microsoft Excel files. A NULL pointer dereference vulnerability exists when parsing XLS cells in libxls/xls2csv.c:199. It could allow a remote attacker to cause a denial of service via crafted XLS file...

Fedora 32 : libxls (2020-688a51575a)

Security fix for CVE-2020-27819 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. C Tenable Network...

Fedora 33 : libxls (2020-ad84def381)

Security fix for CVE-2020-27819 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. C Tenable Network...

Libxls Code Issue Vulnerability

Libxls is a C-based codebase for reading data from OLT-formatted xls files by the Libxls individual developer. A code issue vulnerability exists in libxls, which can be exploited by an attacker to trigger a denial of service via a forced null pointer dereference via xls2csv.c in libxls. The...

Fedora: Security Advisory for libxls (FEDORA-2020-ad84def381)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Fedora: Security Advisory for libxls (FEDORA-2020-688a51575a)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

CVE-2017-2910

An exploitable Out-of-bounds Write vulnerability exists in the xlsaddCell function of libxls 2.0. A specially crafted xls file can cause a memory corruption resulting in remote code execution. An attacker can send malicious xls file to trigger this vulnerability...

CVE-2017-2910

An exploitable Out-of-bounds Write vulnerability exists in the xlsaddCell function of libxls 2.0. A specially crafted xls file can cause a memory corruption resulting in remote code execution. An attacker can send malicious xls file to trigger this vulnerability...

UBUNTU-CVE-2017-2910

An exploitable Out-of-bounds Write vulnerability exists in the xlsaddCell function of libxls 2.0. A specially crafted xls file can cause a memory corruption resulting in remote code execution. An attacker can send malicious xls file to trigger this vulnerability...

CVE-2017-2910

The vulnerability CVE-2017-2910 affects libxls (notably xls_addCell) and is caused by an out-of-bounds write during MULBLANK record handling. A crafted XLS can trigger memory corruption, leading to remote code execution. Public writeups (e.g., TALOS-2017-0417) document the exact code path and sho...

CVE-2017-2910

An exploitable Out-of-bounds Write vulnerability exists in the xlsaddCell function of libxls 2.0. A specially crafted xls file can cause a memory corruption resulting in remote code execution. An attacker can send malicious xls file to trigger this vulnerability...

Libxls Buffer Error Vulnerability

Libxls is a C-based code library for reading data from OLT-formatted xls files from the Libxls individual developer. A buffer error vulnerability exists in libxls version 2.0, which stems from an exploitable out-of-bounds write vulnerability in the xlsaddCell function. A specially written xls fil...

GLSA-202003-64 : libxls: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202003-64 libxls: Multiple vulnerabilities Multiple vulnerabilities have been discovered in libxls. Please review the CVE identifiers referenced below for details. Impact : A remote attacker could entice a user to process a...

libxls: Multiple vulnerabilities

Background libxls is a C library for reading Excel files in the nasty old binary OLE format, plus a command-line tool for converting XLS to CSV. Description Multiple vulnerabilities have been discovered in libxls. Please review the CVE identifiers referenced below for details. Impact A remote...

libxls/fuzz_xls: Heap-buffer-overflow in xls_isCellTooSmall

Project: https://github.com/libxls/libxls.git Detailed report: https://oss-fuzz.com/testcase?key=5085850579238912 Project: libxls Fuzzer: afllibxlsfuzzxls Fuzz target binary: fuzzxls Job Type: aflasanlibxls Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x603000002008...

Denial of service vulnerability in libxls (CNVD-2019-01502)

libxls is a C library for reading Exce xls files. A denial of service vulnerability exists in libxls, which can be exploited by an attacker to cause a denial of service...

libxls Denial of Service Vulnerability

libxls is a C library for reading Exce xls files. A denial of service vulnerability exists in the 'readMSATbody' function of the ole.c file in libxls version 1.4.0, which can be exploited by an attacker to cause a denial of service application crash with the help of a specially crafted file...