CVE-2015-2776

CVE-2015-2776 affects FreeXL versions earlier than 1.0.0i. The vulnerability resides in the parse_SST function and can be exploited remotely via a crafted shared strings table in a workbook to cause a Denial of Service (memory consumption). Public sources consistently describe DoS as the impact; ...