CVE-2016-4335

An exploitable buffer overflow exists in the XLS parsing of the Lexmark Perspective Document Filters conversion functionality. A crafted XLS document can lead to a stack based buffer overflow resulting in remote code execution...

CVE-2016-4335

CVE-2016-4335 is a stack-based buffer overflow in Lexmark Perceptive Document Filters during XLS parsing. The root cause is reading a user-controlled size from the header (MSOFBH) and using it for a memcpy into a fixed-size stack buffer, which, for a specific header instance (notably 0xF016, a ms...

CVE-2016-4335: Improper Restriction of Operations within the Bounds of a Memory Buffer

An exploitable buffer overflow exists in the XLS parsing of the Lexmark Perspective Document Filters conversion functionality. A crafted XLS document can lead to a stack based buffer overflow resulting in remote code execution...

Threat Outbreak Alert RuleID26652: Email Messages Distributing Malicious Software on November 30, 2016

Medium Alert ID: 49912 First Published: 2016 November 30 19:11 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID26652 may contain the following files: Name |...

Threat Outbreak Alert RuleID26351: Email Messages Distributing Malicious Software on November 15, 2016

Medium Alert ID: 49728 First Published: 2016 November 15 20:34 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID26351 may contain the following files: Name |...

LexMark Perceptive Document Filters XLS Convert Code Execution Vulnerability

Talos Vulnerability Report TALOS-2016-0172 LexMark Perceptive Document Filters XLS Convert Code Execution Vulnerability August 6, 2016 CVE Number CVE-2016-4335 Description An exploitable buffer overflow exists in the XLS parsing of the Perspective Document Filters conversion functionality. A...

Threat Outbreak Alert RuleID23023: Email Messages Distributing Malicious Software on May 21, 2016

Medium Alert ID: 46325 First Published: 2016 May 23 14:14 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID23023 may contain the following files: Name | Size...

XLS-Medical Abnehm-App - External URLs, SD-card access, SQLite database found vulnerabilities

HackApp vulnerability scanner discovered that application XLS-Medical Abnehm-App published at the 'play' market has multiple vulnerabilities...

Threat Outbreak Alert RuleID21176: Email Messages Distributing Malicious Software on February 19, 2016

Medium Alert ID: 43653 First Published: 2016 February 19 21:21 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID21176 may contain the following files: Name |...

Threat Outbreak Alert RuleID21136: Email Messages Distributing Malicious Software on February 18, 2016

Medium Alert ID: 43610 First Published: 2016 February 18 16:49 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID21136 may contain the following files: Name |...

Threat Outbreak Alert RuleID19784: Email Messages Distributing Malicious Software on December 1, 2015

Medium Alert ID: 42427 First Published: 2015 December 1 20:55 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID19784 may contain the following files: Name |...

Threat Outbreak Alert RuleID19387: Email Messages Distributing Malicious Software on November 13, 2015

Medium Alert ID: 42079 First Published: 2015 November 13 16:44 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID19387 may contain the following files: Name |...

Threat Outbreak Alert RuleID17409: Email Messages Distributing Malicious Software on August 16, 2015

Medium Alert ID: 40527 First Published: 2015 August 17 14:18 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID17409 may contain the following files: Name |...

Threat Outbreak Alert RuleID16829: Email Messages Distributing Malicious Software on July 21, 2015

Medium Alert ID: 40078 First Published: 2015 July 22 12:23 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID16829 may contain the following files: Name | Siz...

Microsoft Excel Sheet Name Memory Corruption - Ver2 (CVE-2007-3490)

Microsoft Excel is a popular spreadsheet application that is usually released as part of the Microsoft Office suite. The application can create complex spreadsheets with multiple workbooks, formulae, and various data sources. The proprietary file format used for storing Microsoft Excel documents ...

Microsoft Excel Sheet Name Memory Corruption - Ver2 (CVE-2007-3490)

Microsoft Excel is a popular spreadsheet application that is usually released as part of the Microsoft Office suite. The application can create complex spreadsheets with multiple workbooks, formulae, and various data sources. The proprietary file format used for storing Microsoft Excel documents ...

Fedora 20 : freexl-1.0.0i-1.fc20 (2015-3372)

Four potentially harmful bugs causing crashes and stack corruption were detected in FreeXL by American Fuzzy Lop and are solved in this release. Please note: such issues are never realistically expected to be encountered in real world XLS spreadsheets, anyway some purposely forged XLS document...

Fedora 22 : freexl-1.0.0i-1.fc22 (2015-3517)

Four potentially harmful bugs causing crashes and stack corruption were detected in FreeXL by American Fuzzy Lop and are solved in this release. Please note: such issues are never realistically expected to be encountered in real world XLS spreadsheets, anyway some purposely forged XLS document...

Code injection

Topline Opportunity Form aka XLS Opp form before 2015-02-15 does not properly restrict access to database-connection strings, which allows attackers to read the cleartext version of sensitive credential and e-mail address information via unspecified vectors...

CVE-2015-1608

CVE-2015-1608 affects the Topline Opportunity Form (XLS Opp form). The underlying issue is improper access restriction to database-connection strings, allowing an attacker to read cleartext credentials and email addresses via unspecified vectors. Connected sources corroborate the same description...