287 matches found
GLSA-202003-64 : libxls: Multiple vulnerabilities
The remote host is affected by the vulnerability described in GLSA-202003-64 libxls: Multiple vulnerabilities Multiple vulnerabilities have been discovered in libxls. Please review the CVE identifiers referenced below for details. Impact : A remote attacker could entice a user to process a...
libxls: Multiple vulnerabilities
Background libxls is a C library for reading Excel files in the nasty old binary OLE format, plus a command-line tool for converting XLS to CSV. Description Multiple vulnerabilities have been discovered in libxls. Please review the CVE identifiers referenced below for details. Impact A remote...
libxls/fuzz_xls: Heap-buffer-overflow in xls_isCellTooSmall
Project: https://github.com/libxls/libxls.git Detailed report: https://oss-fuzz.com/testcase?key=5085850579238912 Project: libxls Fuzzer: afllibxlsfuzzxls Fuzz target binary: fuzzxls Job Type: aflasanlibxls Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x603000002008...
libxls Denial of Service Vulnerability
libxls is a C library for reading Exce xls files. A denial of service vulnerability exists in the 'readMSATbody' function of the ole.c file in libxls version 1.4.0, which can be exploited by an attacker to cause a denial of service application crash with the help of a specially crafted file...
Denial of service vulnerability in libxls (CNVD-2019-01502)
libxls is a C library for reading Exce xls files. A denial of service vulnerability exists in libxls, which can be exploited by an attacker to cause a denial of service...
CVE-2018-20452
The readMSATbody function in ole.c in libxls 1.4.0 has an invalid free that allows attackers to cause a denial of service application crash or possibly have unspecified other impact via a crafted file, because of inconsistent memory management new versus free in ole2readheader in ole.c...
CVE-2018-20452
The readMSATbody function in ole.c in libxls 1.4.0 has an invalid free that allows attackers to cause a denial of service application crash or possibly have unspecified other impact via a crafted file, because of inconsistent memory management new versus free in ole2readheader in ole.c...
Double free
The readMSAT function in ole.c in libxls 1.4.0 has a double free that allows attackers to cause a denial of service application crash via a crafted file, a different vulnerability than CVE-2017-2897...
CVE-2018-20450
The readMSAT function in ole.c in libxls 1.4.0 has a double free that allows attackers to cause a denial of service application crash via a crafted file, a different vulnerability than CVE-2017-2897...
CVE-2018-20450
The readMSAT function in ole.c in libxls 1.4.0 has a double free that allows attackers to cause a denial of service application crash via a crafted file, a different vulnerability than CVE-2017-2897...
UBUNTU-CVE-2018-20450
The readMSAT function in ole.c in libxls 1.4.0 has a double free that allows attackers to cause a denial of service application crash via a crafted file, a different vulnerability than CVE-2017-2897...
Design/Logic Flaw
The readMSATbody function in ole.c in libxls 1.4.0 has an invalid free that allows attackers to cause a denial of service application crash or possibly have unspecified other impact via a crafted file, because of inconsistent memory management new versus free in ole2readheader in ole.c...
CVE-2018-20452
The readMSATbody function in ole.c in libxls 1.4.0 has an invalid free that allows attackers to cause a denial of service application crash or possibly have unspecified other impact via a crafted file, because of inconsistent memory management new versus free in ole2readheader in ole.c...
CVE-2018-20450
The readMSAT function in ole.c in libxls 1.4.0 has a double free that allows attackers to cause a denial of service application crash via a crafted file, a different vulnerability than CVE-2017-2897...
DEBIAN-CVE-2018-20450
The readMSAT function in ole.c in libxls 1.4.0 has a double free that allows attackers to cause a denial of service application crash via a crafted file, a different vulnerability than CVE-2017-2897...
DEBIAN-CVE-2018-20452
The readMSATbody function in ole.c in libxls 1.4.0 has an invalid free that allows attackers to cause a denial of service application crash or possibly have unspecified other impact via a crafted file, because of inconsistent memory management new versus free in ole2readheader in ole.c...
CVE-2018-20450
CVE-2018-20450 : In libxls 1.4.0, the read_MSAT function in ole.c has a double-free vulnerability, allowing denial of service (application crash) via a crafted XLS file. This is a separate issue from CVE-2017-2897. Connected sources confirm the affected component and impact, with remediation guid...
CVE-2018-20452
The readMSATbody function in ole.c in libxls 1.4.0 has an invalid free that allows attackers to cause a denial of service application crash or possibly have unspecified other impact via a crafted file, because of inconsistent memory management new versus free in ole2readheader in ole.c...
CVE-2018-20450
The readMSAT function in ole.c in libxls 1.4.0 has a double free that allows attackers to cause a denial of service application crash via a crafted file, a different vulnerability than CVE-2017-2897...
CVE-2018-20450
The readMSAT function in ole.c in libxls 1.4.0 has a double free that allows attackers to cause a denial of service application crash via a crafted file, a different vulnerability than CVE-2017-2897...