CVE-2017-12109

An exploitable integer overflow vulnerability exists in the xlspreparseWorkSheet function of libxls 1.4 when handling a MULRK record. A specially crafted XLS file can cause a memory corruption resulting in remote code execution. An attacker can send malicious XLS file to trigger this vulnerabilit...

CVE-2017-12109

CVE-2017-12109 is a vulnerability in libxls 1.4 where the xls_preparseWorkSheet function can overflow while processing a MULRK record, causing memory corruption and potentially remote code execution when a malicious XLS is opened. The issue is documented across multiple sources (NVD/NSS/Nessus re...

CVE-2017-12108: Integer Overflow or Wraparound

An exploitable integer overflow vulnerability exists in the xlspreparseWorkSheet function of libxls 1.4 when handling a MULBLANK record. A specially crafted XLS file can cause a memory corruption resulting in remote code execution. An attacker can send malicious XLS file to trigger this...

CVE-2017-12109: Integer Overflow or Wraparound

An exploitable integer overflow vulnerability exists in the xlspreparseWorkSheet function of libxls 1.4 when handling a MULRK record. A specially crafted XLS file can cause a memory corruption resulting in remote code execution. An attacker can send malicious XLS file to trigger this vulnerabilit...

Debian DSA-4173-1 : r-cran-readxl - security update

Marcin Noga discovered multiple vulnerabilities in readxl, a GNU R package to read Excel files via the integrated libxls library, which could result in the execution of arbitrary code if a malformed spreadsheet is processed. C Tenable Network Security, Inc. The descriptive text and package checks...

[SECURITY] [DSA 4173-1] r-cran-readxl security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4173-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff April 16, 2018 https://www.debian.org/security/faq -...

libxls xls_preparseWorkSheet MULBLANK Code Execution Vulnerability(CVE-2017-12108)

Summary An exploitable integer overflow vulnerability exists in the xlspreparseWorkSheet function of libxls 1.4 when handling a MULBLANK record. A specially crafted XLS file can cause a memory corruption resulting in remote code execution. An attacker can send malicious XLS file to trigger this...

libxls xls_addCell Formula Code Execution Vulnerability(CVE-2017-12111)

Summary An exploitable out-of-bounds vulnerability exists in the xlsaddCell function of libxls 1.4. A specially crafted XLS file with a formula record can cause memory corruption resulting in remote code execution. An attacker can send a malicious XLS file to trigger this vulnerability. Tested...

libxls read_MSAT Code Execution Vulnerability(CVE-2017-2897)

Summary An exploitable out-of-bounds write vulnerability exists in the readMSAT function of libxls 1.4. A specially crafted XLS file can cause a memory corruption resulting in remote code execution. An attacker can send malicious XLS file to trigger this vulnerability. Tested Versions libxls 1.4...

libxls xls_mergedCells Code Execution Vulnerability(CVE-2017-2896)

Summary An exploitable out-of-bounds write vulnerability exists in the xlsmergedCells function of libxls 1.4. A specially crafted XLS file can cause a memory corruption resulting in remote code execution. An attacker can send malicious xls file to trigger this vulnerability. Tested Versions libxl...

libxls xls_appendSST Code Execution Vulnerability(CVE-2017-12110)

Summary An exploitable integer overflow vulnerability exists in the xlsappendSST function of libxls 1.4. A specially crafted XLS file can cause memory corruption resulting in remote code execution. An attacker can send a malicious XLS file to trigger this vulnerability. Tested Versions libxls 1.4...

libxls xls_preparseWorkSheet MULRK Code Execution Vulnerability(CVE-2017-12109)

Summary An exploitable integer overflow vulnerability exists in the xlspreparseWorkSheet function of libxls 1.4 when handling a MULRK record. A specially crafted XLS file can cause a memory corruption resulting in remote code execution. An attacker can send malicious XLS file to trigger this...

Integer overflow vulnerability in libxls 'xls_preparseWorkSheet' function (CNVD-2017-37688)

libxls is a C library for reading Exce xls files. An integer overflow vulnerability exists in the 'xlspreparseWorkSheet' function in libxls version 1.4. A remote attacker can exploit this vulnerability to execute code memory corruption with the help of a malicious XLS file...

libxls 'xls_preparseWorkSheet' function integer overflow vulnerability

libxls is a C library for reading Exce xls files. An integer overflow vulnerability exists in the 'xlspreparseWorkSheet' function in libxls version 1.4. A remote attacker can exploit this vulnerability to execute code memory corruption with the help of a malicious XLS file...

libxls Stack Buffer Overflow Vulnerability

libxls is a C library that can read Excel xls files. A stack buffer overflow vulnerability exists in the xlsgetfcell function in libxls 1.3.4. An attacker can exploit this vulnerability by sending a malicious XLS file to cause memory corruption, which can lead to remote code execution...

Libxls Code Execution Vulnerability

libxls is a C library that can read Excel xls files. A code execution vulnerability exists in the xlsaddCell function in libxls 1.4. An attacker can exploit this vulnerability by sending a malicious XLS file to cause a memory corruption that could lead to remote code execution...

libxls 'xls_appendSST' function integer overflow vulnerability

libxls is a C library for reading Exce xls files. An integer overflow vulnerability exists in the 'xlsappendSST' function in libxls version 1.4. A remote attacker can exploit this vulnerability to execute code memory corruption with the help of specially crafted XLS files...

libxls out-of-bounds write vulnerability (CNVD-2017-37753)

libxls is a C library that can read Excel xls files. An out-of-bounds write vulnerability exists in the readMSAT function in libxls 1.4. An attacker can exploit this vulnerability by sending a malicious XLS file to cause a memory corruption that could lead to remote code execution...

Libxls Out-of-Bounds Write Vulnerability

libxls is a C library that can read Excel xls files. An out-of-bounds write vulnerability exists in the xlsmergedCells function in libxls 1.4. An attacker can exploit this vulnerability by sending a malicious XLS file to cause a memory corruption that could lead to remote code execution...

DEBIAN-CVE-2017-2897

An exploitable out-of-bounds write vulnerability exists in the readMSAT function of libxls 1.4. A specially crafted XLS file can cause a memory corruption resulting in remote code execution. An attacker can send malicious XLS file to trigger this vulnerability...