72 matches found
CVE-2023-38856
CVE-2023-38856 is a buffer overflow in libxlsv 1.6.2 affecting the get_string function in xlstool.c:411, enabling remote code execution and denial of service via a crafted XLS file. Multiple sources (NVD, RedHat, OSV, CVE listings, and PET/PT security notes) confirm the issue; CVSS v3.1 indicates...
CVE-2023-38851
Buffer Overflow vulnerability in libxlsv.1.6.2 allows a remote attacker to execute arbitrary code and cause a denial of service via a crafted XLS file to the xlsparseWorkBook function in xls.c:1018...
CVE-2023-38851
Buffer Overflow vulnerability in libxlsv.1.6.2 allows a remote attacker to execute arbitrary code and cause a denial of service via a crafted XLS file to the xlsparseWorkBook function in xls.c:1018...
CVE-2023-38851: Out-of-bounds Write
Buffer Overflow vulnerability in libxlsv.1.6.2 allows a remote attacker to execute arbitrary code and cause a denial of service via a crafted XLS file to the xlsparseWorkBook function in xls.c:1018...
CVE-2023-38855
Buffer Overflow vulnerability in libxlsv.1.6.2 allows a remote attacker to execute arbitrary code and cause a denial of service via a crafted XLS file to the getstring function in xlstool.c:395...
CVE-2023-38851
Buffer Overflow vulnerability in libxlsv.1.6.2 allows a remote attacker to execute arbitrary code and cause a denial of service via a crafted XLS file to the xlsparseWorkBook function in xls.c:1018...
CVE-2023-38851
Buffer Overflow vulnerability in libxlsv.1.6.2 allows a remote attacker to execute arbitrary code and cause a denial of service via a crafted XLS file to the xlsparseWorkBook function in xls.c:1018...
CVE-2023-38856
Buffer Overflow vulnerability in libxlsv.1.6.2 allows a remote attacker to execute arbitrary code and cause a denial of service via a crafted XLS file to the getstring function in xlstool.c:411...
CVE-2023-38854
Buffer Overflow vulnerability in libxlsv.1.6.2 allows a remote attacker to execute arbitrary code and cause a denial of service via a crafted XLS file to the transcodelatin1toutf8 function in xlstool.c:296...
CVE-2023-38851
CVE-2023-38851 affects libxls v1.6.2. The vulnerability is a buffer overflow in the xls_parseWorkBook function (xls.c:1018) that could enable a remote attacker to execute arbitrary code and cause a denial of service via a crafted XLS file. Several sources corroborate the issue and, in at least on...
CVE-2023-38852
CVE-2023-38852 affects libxls (libxlsv.1.6.2) with a buffer overflow in unicode_decode_wcstombs in xlstool.c:266, allowing remote code execution and potential DoS. Fedori distributions have issued security advisories and patches (libxls-1.6.2-14.fc38/14.fc39) addressing this vulnerability; Fedora...