Fedora 33 : libxls (2020-ad84def381)

Security fix for CVE-2020-27819 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. C Tenable Network...

Fedora: Security Advisory for libxls (FEDORA-2020-688a51575a)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Fedora: Security Advisory for libxls (FEDORA-2020-ad84def381)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

CVE-2017-2910

An exploitable Out-of-bounds Write vulnerability exists in the xlsaddCell function of libxls 2.0. A specially crafted xls file can cause a memory corruption resulting in remote code execution. An attacker can send malicious xls file to trigger this vulnerability...

UBUNTU-CVE-2017-2910

An exploitable Out-of-bounds Write vulnerability exists in the xlsaddCell function of libxls 2.0. A specially crafted xls file can cause a memory corruption resulting in remote code execution. An attacker can send malicious xls file to trigger this vulnerability...

CVE-2017-2910

An exploitable Out-of-bounds Write vulnerability exists in the xlsaddCell function of libxls 2.0. A specially crafted xls file can cause a memory corruption resulting in remote code execution. An attacker can send malicious xls file to trigger this vulnerability...

CVE-2017-2910

An exploitable Out-of-bounds Write vulnerability exists in the xlsaddCell function of libxls 2.0. A specially crafted xls file can cause a memory corruption resulting in remote code execution. An attacker can send malicious xls file to trigger this vulnerability...

CVE-2017-2910

The vulnerability CVE-2017-2910 affects libxls (notably xls_addCell) and is caused by an out-of-bounds write during MULBLANK record handling. A crafted XLS can trigger memory corruption, leading to remote code execution. Public writeups (e.g., TALOS-2017-0417) document the exact code path and sho...

CVE-2017-2910

An exploitable Out-of-bounds Write vulnerability exists in the xlsaddCell function of libxls 2.0. A specially crafted xls file can cause a memory corruption resulting in remote code execution. An attacker can send malicious xls file to trigger this vulnerability...

CVE-2017-2910: Out-of-bounds Write

An exploitable Out-of-bounds Write vulnerability exists in the xlsaddCell function of libxls 2.0. A specially crafted xls file can cause a memory corruption resulting in remote code execution. An attacker can send malicious xls file to trigger this vulnerability...

PT-2020-8472

Name of the Vulnerable Software and Affected Versions: libxls version 2.0 Description: An exploitable Out-of-bounds Write issue exists in the xls addCell function. A specially crafted xls file can cause memory corruption, resulting in remote code execution. An attacker can send a malicious xls fi...

Libxls Buffer Error Vulnerability

Libxls is a C-based code library for reading data from OLT-formatted xls files from the Libxls individual developer. A buffer error vulnerability exists in libxls version 2.0, which stems from an exploitable out-of-bounds write vulnerability in the xlsaddCell function. A specially written xls fil...

GLSA-202003-64 : libxls: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202003-64 libxls: Multiple vulnerabilities Multiple vulnerabilities have been discovered in libxls. Please review the CVE identifiers referenced below for details. Impact : A remote attacker could entice a user to process a...

libxls: Multiple vulnerabilities

Background libxls is a C library for reading Excel files in the nasty old binary OLE format, plus a command-line tool for converting XLS to CSV. Description Multiple vulnerabilities have been discovered in libxls. Please review the CVE identifiers referenced below for details. Impact A remote...

libxls/fuzz_xls: Heap-buffer-overflow in xls_isCellTooSmall

Project: https://github.com/libxls/libxls.git Detailed report: https://oss-fuzz.com/testcase?key=5085850579238912 Project: libxls Fuzzer: afllibxlsfuzzxls Fuzz target binary: fuzzxls Job Type: aflasanlibxls Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x603000002008...

Denial of service vulnerability in libxls (CNVD-2019-01502)

libxls is a C library for reading Exce xls files. A denial of service vulnerability exists in libxls, which can be exploited by an attacker to cause a denial of service...

libxls Denial of Service Vulnerability

libxls is a C library for reading Exce xls files. A denial of service vulnerability exists in the 'readMSATbody' function of the ole.c file in libxls version 1.4.0, which can be exploited by an attacker to cause a denial of service application crash with the help of a specially crafted file...

UBUNTU-CVE-2018-20450

The readMSAT function in ole.c in libxls 1.4.0 has a double free that allows attackers to cause a denial of service application crash via a crafted file, a different vulnerability than CVE-2017-2897...

CVE-2018-20450

The readMSAT function in ole.c in libxls 1.4.0 has a double free that allows attackers to cause a denial of service application crash via a crafted file, a different vulnerability than CVE-2017-2897...

CVE-2018-20452

The readMSATbody function in ole.c in libxls 1.4.0 has an invalid free that allows attackers to cause a denial of service application crash or possibly have unspecified other impact via a crafted file, because of inconsistent memory management new versus free in ole2readheader in ole.c...