SUSE CVE-2017-2910

An exploitable Out-of-bounds Write vulnerability exists in the xlsaddCell function of libxls 2.0. A specially crafted xls file can cause a memory corruption resulting in remote code execution. An attacker can send malicious xls file to trigger this vulnerability...

AddCell Function Code Execution

The vulnerability of the AddCell function in the web server of the microprogramming software for building automation modules, Desigo PXC4 and PXC5, is related to errors during the elimination of special elements. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by...

CVE-2022-24039

A vulnerability has been identified in Desigo PXC4 All versions V02.20.142.10-10884, Desigo PXC5 All versions V02.20.142.10-10884. The “addCell” JavaScript function fails to properly sanitize user-controllable input before including it into the generated XML body of the XLS report document, such...

CVE-2022-24039: Failure to Sanitize Special Elements into a Different Plane (Special Element Injection)

A vulnerability has been identified in Desigo PXC4 All versions V02.20.142.10-10884, Desigo PXC5 All versions V02.20.142.10-10884. The “addCell” JavaScript function fails to properly sanitize user-controllable input before including it into the generated XML body of the XLS report document, such...

PT-2020-8472

Name of the Vulnerable Software and Affected Versions: libxls version 2.0 Description: An exploitable Out-of-bounds Write issue exists in the xls addCell function. A specially crafted xls file can cause memory corruption, resulting in remote code execution. An attacker can send a malicious xls fi...

UBUNTU-CVE-2017-12111

An exploitable out-of-bounds vulnerability exists in the xlsaddCell function of libxls 1.4. A specially crafted XLS file with a formula record can cause memory corruption resulting in remote code execution. An attacker can send a malicious XLS file to trigger this vulnerability...

PT-2017-12354

Name of the Vulnerable Software and Affected Versions libxls version 1.4 Description An out-of-bounds vulnerability exists in the xls addCell function, allowing remote code execution through memory corruption. This can be triggered by a specially crafted XLS file containing a formula record...