7 matches found
UBUNTU-CVE-2017-2924
An exploitable heap-based buffer overflow vulnerability exists in the readlegacybiff function of FreeXL 1.0.3. A specially crafted XLS file can cause a memory corruption resulting in remote code execution. An attacker can send malicious XLS file to trigger this vulnerability...
[SECURITY] Fedora 27 Update: freexl-1.0.5-1.fc27
FreeXL is a library to extract valid data from within an Excel spreadsheet .xls Design goals: simple and lightweight stable, robust and efficient easily and universally portable completely ignore any GUI-related oddity...
Remote Code Execution (RCE) Through Heap-based Buffer Overflow
freexl is vulnerable to remote code execution RCE Through heap based buffer overflow. The library does not check the content and dimension of the XLS files input to the readbiffnextrecord function, allowing the vulnerability to be triggered when a malicious XLS file is passed to the application...
FreeXL Excel File Parsing Integer Overflow Vulnerability
FreeXL is an open source library for extracting valid data from Excel .xls spreadsheets developed by software developer Alessandro Furieri. An integer overflow vulnerability exists in FreeXL, which arises from the program failing to perform proper bounds checking on user-submitted input. An...
freexl library DoS
DoS on Excel document parsing...
UBUNTU-CVE-2015-2754
FreeXL before 1.0.0i allows remote attackers to cause a denial of service stack corruption and possibly execute arbitrary code via a crafted workbook, related to a "premature EOF."...
[SECURITY] Fedora 22 Update: freexl-1.0.0i-1.fc22
FreeXL is a library to extract valid data from within an Excel spreadsheet .xls Design goals: simple and lightweight stable, robust and efficient easily and universally portable completely ignore any GUI-related oddity...