Lucene search
+L

616 matches found

Prion
Prion
added 2018/01/29 5:29 p.m.26 views

Denial of service

Apache POI in versions prior to release 3.17 are vulnerable to Denial of Service Attacks: 1 Infinite Loops while parsing crafted WMF, EMF, MSG and macros POI bugs 61338 and 61294, and 2 Out of Memory Exceptions while parsing crafted DOC, PPT and XLS POI bugs 52372 and 61295...

5CVSS7.7AI score0.10142EPSS
SaveExploits3References11Affected Software1
OSV
OSV
added 2018/01/29 5:29 p.m.29 views

CVE-2017-12626

Apache POI in versions prior to release 3.17 are vulnerable to Denial of Service Attacks: 1 Infinite Loops while parsing crafted WMF, EMF, MSG and macros POI bugs 61338 and 61294, and 2 Out of Memory Exceptions while parsing crafted DOC, PPT and XLS POI bugs 52372 and 61295...

7.5CVSS7.8AI score
SaveExploits0References11
OSV
OSV
added 2018/01/29 5:29 p.m.13 views

UBUNTU-CVE-2017-12626

Apache POI in versions prior to release 3.17 are vulnerable to Denial of Service Attacks: 1 Infinite Loops while parsing crafted WMF, EMF, MSG and macros POI bugs 61338 and 61294, and 2 Out of Memory Exceptions while parsing crafted DOC, PPT and XLS POI bugs 52372 and 61295...

7.5CVSS7.1AI score0.10142EPSS
SaveExploits3References7
Veracode
Veracode
added 2018/01/29 4:14 a.m.44 views

Denial Of Service (DoS)

Apache poi is vulnerable to denial of service DoS attacks. Attackers can cause infinite loops, when parsing WMF, EMF, MSG and macro files. They can also cause Out-of-Memory OOM exceptions to occur when parsing DOC, PPT and XLS files...

7.5CVSS8.1AI score0.10142EPSS
SaveExploits3References22Affected Software2
Zero Day Initiative
Zero Day Initiative
added 2017/12/06 12:00 a.m.71 views

Microsoft Office Excel XLS File Parsing Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Microsoft Excel. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of X...

6.8CVSS4.7AI score0.09494EPSS
SaveExploits0References1
seebug.org
seebug.org
added 2017/11/29 12:00 a.m.50 views

libxls xls_appendSST Code Execution Vulnerability(CVE-2017-12110)

Summary An exploitable integer overflow vulnerability exists in the xlsappendSST function of libxls 1.4. A specially crafted XLS file can cause memory corruption resulting in remote code execution. An attacker can send a malicious XLS file to trigger this vulnerability. Tested Versions libxls 1.4...

6.8CVSS0.2AI score0.02097EPSS
SaveExploits1
seebug.org
seebug.org
added 2017/11/29 12:00 a.m.46 views

libxls xls_mergedCells Code Execution Vulnerability(CVE-2017-2896)

Summary An exploitable out-of-bounds write vulnerability exists in the xlsmergedCells function of libxls 1.4. A specially crafted XLS file can cause a memory corruption resulting in remote code execution. An attacker can send malicious xls file to trigger this vulnerability. Tested Versions libxl...

6.8CVSS0.02052EPSS
SaveExploits1
seebug.org
seebug.org
added 2017/11/29 12:00 a.m.66 views

libxls read_MSAT Code Execution Vulnerability(CVE-2017-2897)

Summary An exploitable out-of-bounds write vulnerability exists in the readMSAT function of libxls 1.4. A specially crafted XLS file can cause a memory corruption resulting in remote code execution. An attacker can send malicious XLS file to trigger this vulnerability. Tested Versions libxls 1.4...

6.8CVSS0.5AI score0.02061EPSS
SaveExploits1
CNVD
CNVD
added 2017/11/25 12:00 a.m.15 views

Integer overflow vulnerability in libxls 'xls_preparseWorkSheet' function (CNVD-2017-37688)

libxls is a C library for reading Exce xls files. An integer overflow vulnerability exists in the 'xlspreparseWorkSheet' function in libxls version 1.4. A remote attacker can exploit this vulnerability to execute code memory corruption with the help of a malicious XLS file...

8.8CVSS7.7AI score0.02771EPSS
SaveExploits2References1
CNVD
CNVD
added 2017/11/25 12:00 a.m.8 views

libxls 'xls_preparseWorkSheet' function integer overflow vulnerability

libxls is a C library for reading Exce xls files. An integer overflow vulnerability exists in the 'xlspreparseWorkSheet' function in libxls version 1.4. A remote attacker can exploit this vulnerability to execute code memory corruption with the help of a malicious XLS file...

8.8CVSS7.7AI score0.02771EPSS
SaveExploits2References1
CNVD
CNVD
added 2017/11/21 12:00 a.m.8 views

Libxls Code Execution Vulnerability

libxls is a C library that can read Excel xls files. A code execution vulnerability exists in the xlsaddCell function in libxls 1.4. An attacker can exploit this vulnerability by sending a malicious XLS file to cause a memory corruption that could lead to remote code execution...

8.8CVSS8.5AI score0.02078EPSS
SaveExploits1References1
CNVD
CNVD
added 2017/11/21 12:00 a.m.9 views

Libxls Out-of-Bounds Write Vulnerability

libxls is a C library that can read Excel xls files. An out-of-bounds write vulnerability exists in the xlsmergedCells function in libxls 1.4. An attacker can exploit this vulnerability by sending a malicious XLS file to cause a memory corruption that could lead to remote code execution...

8.8CVSS8.3AI score0.02052EPSS
SaveExploits1References1
Prion
Prion
added 2017/11/20 10:29 p.m.17 views

Out-of-bounds

An exploitable out-of-bounds write vulnerability exists in the xlsmergedCells function of libxls 1.4. . A specially crafted XLS file can cause a memory corruption resulting in remote code execution. An attacker can send malicious XLS file to trigger this vulnerability...

6.8CVSS8.1AI score0.02052EPSS
SaveExploits1References3Affected Software2
UbuntuCve
UbuntuCve
added 2017/11/20 10:29 p.m.24 views

CVE-2017-12111

An exploitable out-of-bounds vulnerability exists in the xlsaddCell function of libxls 1.4. A specially crafted XLS file with a formula record can cause memory corruption resulting in remote code execution. An attacker can send a malicious XLS file to trigger this vulnerability...

8.8CVSS7.4AI score0.02078EPSS
SaveExploits1References2
OSV
OSV
added 2017/11/20 10:29 p.m.5 views

DEBIAN-CVE-2017-2897

An exploitable out-of-bounds write vulnerability exists in the readMSAT function of libxls 1.4. A specially crafted XLS file can cause a memory corruption resulting in remote code execution. An attacker can send malicious XLS file to trigger this vulnerability...

7.8CVSS8.4AI score0.02061EPSS
SaveExploits1References1
OSV
OSV
added 2017/11/20 10:29 p.m.3 views

DEBIAN-CVE-2017-2919

An exploitable stack based buffer overflow vulnerability exists in the xlsgetfcell function of libxls 1.3.4. A specially crafted XLS file can cause a memory corruption resulting in remote code execution. An attacker can send malicious XLS file to trigger this vulnerability...

7.8CVSS8.5AI score0.02057EPSS
SaveExploits1References1
UbuntuCve
UbuntuCve
added 2017/11/20 10:29 p.m.21 views

CVE-2017-2919

An exploitable stack based buffer overflow vulnerability exists in the xlsgetfcell function of libxls 1.3.4. A specially crafted XLS file can cause a memory corruption resulting in remote code execution. An attacker can send malicious XLS file to trigger this vulnerability...

8.8CVSS7.5AI score0.02057EPSS
SaveExploits1References2
UbuntuCve
UbuntuCve
added 2017/11/20 10:29 p.m.33 views

CVE-2017-2897

An exploitable out-of-bounds write vulnerability exists in the readMSAT function of libxls 1.4. A specially crafted XLS file can cause a memory corruption resulting in remote code execution. An attacker can send malicious XLS file to trigger this vulnerability...

8.8CVSS7.1AI score0.02061EPSS
SaveExploits1References2
Prion
Prion
added 2017/11/20 10:29 p.m.17 views

Out-of-bounds

An exploitable out-of-bounds write vulnerability exists in the readMSAT function of libxls 1.4. A specially crafted XLS file can cause a memory corruption resulting in remote code execution. An attacker can send malicious XLS file to trigger this vulnerability...

6.8CVSS7.4AI score0.02061EPSS
SaveExploits1References3Affected Software1
NVD
NVD
added 2017/11/20 10:29 p.m.25 views

CVE-2017-2896

An exploitable out-of-bounds write vulnerability exists in the xlsmergedCells function of libxls 1.4. . A specially crafted XLS file can cause a memory corruption resulting in remote code execution. An attacker can send malicious XLS file to trigger this vulnerability...

8.8CVSS8.2AI score0.02052EPSS
SaveExploits1References3
Rows per page
Query Builder