233 matches found
libxls Denial of Service Vulnerability
libxls is a C library for reading Exce xls files. A denial of service vulnerability exists in the 'readMSATbody' function of the ole.c file in libxls version 1.4.0, which can be exploited by an attacker to cause a denial of service application crash with the help of a specially crafted file...
Denial of service vulnerability in libxls (CNVD-2019-01502)
libxls is a C library for reading Exce xls files. A denial of service vulnerability exists in libxls, which can be exploited by an attacker to cause a denial of service...
Double free
The readMSAT function in ole.c in libxls 1.4.0 has a double free that allows attackers to cause a denial of service application crash via a crafted file, a different vulnerability than CVE-2017-2897...
CVE-2018-20452
The readMSATbody function in ole.c in libxls 1.4.0 has an invalid free that allows attackers to cause a denial of service application crash or possibly have unspecified other impact via a crafted file, because of inconsistent memory management new versus free in ole2readheader in ole.c...
CVE-2018-20452
The readMSATbody function in ole.c in libxls 1.4.0 has an invalid free that allows attackers to cause a denial of service application crash or possibly have unspecified other impact via a crafted file, because of inconsistent memory management new versus free in ole2readheader in ole.c...
CVE-2018-20450
The readMSAT function in ole.c in libxls 1.4.0 has a double free that allows attackers to cause a denial of service application crash via a crafted file, a different vulnerability than CVE-2017-2897...
CVE-2018-20450
The readMSAT function in ole.c in libxls 1.4.0 has a double free that allows attackers to cause a denial of service application crash via a crafted file, a different vulnerability than CVE-2017-2897...
Design/Logic Flaw
The readMSATbody function in ole.c in libxls 1.4.0 has an invalid free that allows attackers to cause a denial of service application crash or possibly have unspecified other impact via a crafted file, because of inconsistent memory management new versus free in ole2readheader in ole.c...
UBUNTU-CVE-2018-20450
The readMSAT function in ole.c in libxls 1.4.0 has a double free that allows attackers to cause a denial of service application crash via a crafted file, a different vulnerability than CVE-2017-2897...
CVE-2018-20452
The readMSATbody function in ole.c in libxls 1.4.0 has an invalid free that allows attackers to cause a denial of service application crash or possibly have unspecified other impact via a crafted file, because of inconsistent memory management new versus free in ole2readheader in ole.c...
CVE-2018-20450
The readMSAT function in ole.c in libxls 1.4.0 has a double free that allows attackers to cause a denial of service application crash via a crafted file, a different vulnerability than CVE-2017-2897...
DEBIAN-CVE-2018-20450
The readMSAT function in ole.c in libxls 1.4.0 has a double free that allows attackers to cause a denial of service application crash via a crafted file, a different vulnerability than CVE-2017-2897...
DEBIAN-CVE-2018-20452
The readMSATbody function in ole.c in libxls 1.4.0 has an invalid free that allows attackers to cause a denial of service application crash or possibly have unspecified other impact via a crafted file, because of inconsistent memory management new versus free in ole2readheader in ole.c...
CVE-2018-20450
CVE-2018-20450 : In libxls 1.4.0, the read_MSAT function in ole.c has a double-free vulnerability, allowing denial of service (application crash) via a crafted XLS file. This is a separate issue from CVE-2017-2897. Connected sources confirm the affected component and impact, with remediation guid...
CVE-2018-20452
The readMSATbody function in ole.c in libxls 1.4.0 has an invalid free that allows attackers to cause a denial of service application crash or possibly have unspecified other impact via a crafted file, because of inconsistent memory management new versus free in ole2readheader in ole.c...
CVE-2018-20450
The readMSAT function in ole.c in libxls 1.4.0 has a double free that allows attackers to cause a denial of service application crash via a crafted file, a different vulnerability than CVE-2017-2897...
CVE-2018-20450
The readMSAT function in ole.c in libxls 1.4.0 has a double free that allows attackers to cause a denial of service application crash via a crafted file, a different vulnerability than CVE-2017-2897...
CVE-2018-20452
CVE-2018-20452 affects libxls 1.4.0, where an invalid free in read_MSAT_body (and related memory handling in ole2_read_header in ole.c) can lead to a denial of service (application crash) or potentially other impact via crafted files. Multiple connected sources confirm the vulnerability resides i...
CVE-2017-12108
An exploitable integer overflow vulnerability exists in the xlspreparseWorkSheet function of libxls 1.4 when handling a MULBLANK record. A specially crafted XLS file can cause a memory corruption resulting in remote code execution. An attacker can send malicious XLS file to trigger this...
CVE-2017-12109
An exploitable integer overflow vulnerability exists in the xlspreparseWorkSheet function of libxls 1.4 when handling a MULRK record. A specially crafted XLS file can cause a memory corruption resulting in remote code execution. An attacker can send malicious XLS file to trigger this vulnerabilit...