[SECURITY] [DSA 4173-1] r-cran-readxl security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4173-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff April 16, 2018 https://www.debian.org/security/faq -...

CVE-2017-2896

An exploitable out-of-bounds write vulnerability exists in the xlsmergedCells function of libxls 1.4. . A specially crafted XLS file can cause a memory corruption resulting in remote code execution. An attacker can send malicious XLS file to trigger this vulnerability...

CVE-2017-2896

CVE-2017-2896 affects libxls 1.4.x, where an exploitable out-of-bounds write in the xls_mergedCells function can cause memory corruption and remote code execution when processing a crafted XLS file. The cited sources describe an attacker sending malicious XLS data to trigger the vulnerability. Th...