9 matches found
Excelize: Unbounded spinCount in agile decryption burns CPU during OpenFile
Opening a file whose first eight bytes are the OLE magic number sends excelize down the decryption path whether or not the caller set a password, or supports encrypted workbooks at all. openReaderAt excelize.go:198-215 branches on the header alone, and agileDecrypt calls convertPasswdToKey before...
7.5CVSS6AI score0.00363EPSS
SaveExploits1References4Affected Software1
20