Lucene search
+L

93 matches found

OSV
OSV
added 2018/02/23 9:29 p.m.3 views

DEBIAN-CVE-2018-7436

An issue was discovered in FreeXL before 1.0.5. There is a heap-based buffer over-read in a pointer dereference of the parseSST function...

8.8CVSS8.9AI score0.02176EPSS
SaveExploits1References1
OSV
OSV
added 2018/02/23 9:29 p.m.3 views

UBUNTU-CVE-2018-7436

An issue was discovered in FreeXL before 1.0.5. There is a heap-based buffer over-read in a pointer dereference of the parseSST function...

8.8CVSS7.4AI score0.02176EPSS
SaveExploits1References4
seebug.org
seebug.org
added 2017/11/29 12:0 a.m.45 views

libxls xls_appendSST Code Execution Vulnerability(CVE-2017-12110)

Summary An exploitable integer overflow vulnerability exists in the xlsappendSST function of libxls 1.4. A specially crafted XLS file can cause memory corruption resulting in remote code execution. An attacker can send a malicious XLS file to trigger this vulnerability. Tested Versions libxls 1.4...

6.8CVSS0.2AI score0.02097EPSS
SaveExploits1
CNVD
CNVD
added 2015/04/01 12:0 a.m.7 views

FreeXL Denial of Service Vulnerability (CNVD-2015-02146)

FreeXL is an open source library for extracting valid data from Excel .xls spreadsheets developed by software developer Alessandro Furieri. A security vulnerability exists in the 'parseSST' function in FreeXL versions prior to 1.0.0i. The vulnerability can be exploited by a remote attacker to cau...

4.3CVSS6.8AI score0.02358EPSS
SaveExploits0References1
Check Point Advisories
Check Point Advisories
added 2014/04/16 12:0 a.m.26 views

Microsoft Excel SST Invalid Length Use After Free - Ver2 (CVE-2012-1887)

A use-after-free vulnerability has been reported in Microsoft Office Excel. The vulnerability is due to an error in Microsoft Excel while handling specially crafted Excel files. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected...

7.1AI score0.25099EPSS
SaveExploits0
NVD
NVD
added 2012/11/14 12:55 a.m.22 views

CVE-2012-1887

Use-after-free vulnerability in Microsoft Excel 2003 SP3, 2007 SP2 and SP3, and 2010 SP1, and Office 2008 and 2011 for Mac, allows remote attackers to execute arbitrary code via a crafted spreadsheet, aka "Excel SST Invalid Length Use After Free Vulnerability."...

9.3CVSS7.4AI score0.25099EPSS
SaveExploits0References7
Prion
Prion
added 2012/11/14 12:55 a.m.16 views

Design/Logic Flaw

Use-after-free vulnerability in Microsoft Excel 2003 SP3, 2007 SP2 and SP3, and 2010 SP1, and Office 2008 and 2011 for Mac, allows remote attackers to execute arbitrary code via a crafted spreadsheet, aka "Excel SST Invalid Length Use After Free Vulnerability."...

9.3CVSS8AI score0.25099EPSS
SaveExploits0References7Affected Software2
Check Point Advisories
Check Point Advisories
added 2012/11/13 12:0 a.m.14 views

Microsoft Excel SST Invalid Length Use After Free (MS12-076; CVE-2012-1887)

A remote code execution vulnerability has been reported in Microsoft Excel. The vulnerability is due to an error in Microsoft Excel while handling specially crafted Excel files. A remote attacker could trigger this flaw by convincing a victim to open a specially crafted Excel file. Successful...

9.3CVSS7.5AI score0.25099EPSS
SaveExploits0
Check Point Advisories
Check Point Advisories
added 2009/09/22 12:0 a.m.59 views

Microsoft Excel SST Record Integer Overflow (MS09-021; CVE-2009-0561; CVE-2009-3037)

Microsoft Excel is a popular spreadsheet application. A remote code execution vulnerability has been identified in the Microsoft Excel. The flaw is due to a memory corruption error in Microsoft Excel when loading specially crafted Excel files that include a malformed record object. The...

9.3CVSS7.2AI score0.36897EPSS
SaveExploits1
Saint
Saint
added 2009/04/23 12:0 a.m.45 views

Microsoft Excel SST record code execution

Added: 04/23/2009 CVE: CVE-2009-0238 BID: 33870 OSVDB: 52695 Background Microsoft Excel, part of the Microsoft Office product suite, is a spreadsheet application for Windows and Macintosh platforms. Problem A vulnerability in Microsoft Excel allows command execution when a user opens a spreadshee...

9.3CVSS6.3AI score0.43063EPSS
SaveExploits4
Saint
Saint
added 2009/04/23 12:0 a.m.34 views

Microsoft Excel SST record code execution

Added: 04/23/2009 CVE: CVE-2009-0238 BID: 33870 OSVDB: 52695 Background Microsoft Excel, part of the Microsoft Office product suite, is a spreadsheet application for Windows and Macintosh platforms. Problem A vulnerability in Microsoft Excel allows command execution when a user opens a spreadshee...

9.3CVSS6.4AI score0.43063EPSS
SaveExploits4
Saint
Saint
added 2009/04/23 12:0 a.m.44 views

Microsoft Excel SST record code execution

Added: 04/23/2009 CVE: CVE-2009-0238 BID: 33870 OSVDB: 52695 Background Microsoft Excel, part of the Microsoft Office product suite, is a spreadsheet application for Windows and Macintosh platforms. Problem A vulnerability in Microsoft Excel allows command execution when a user opens a spreadshee...

9.3CVSS6.3AI score0.43063EPSS
SaveExploits4
Saint
Saint
added 2009/04/23 12:0 a.m.36 views

Microsoft Excel SST record code execution

Added: 04/23/2009 CVE: CVE-2009-0238 BID: 33870 OSVDB: 52695 Background Microsoft Excel, part of the Microsoft Office product suite, is a spreadsheet application for Windows and Macintosh platforms. Problem A vulnerability in Microsoft Excel allows command execution when a user opens a spreadshee...

9.3CVSS6.3AI score0.43063EPSS
SaveExploits4
Rows per page
Query Builder