Null Pointer Vulnerability in WPS Forms

WPS Office is an office software suite developed independently by Kingsoft Corporation. A null pointer vulnerability exists in the form et.exe in WPS when parsing a specific xls file etmain, which can be exploited by an attacker to cause a denial of service or code execution...

Memory Corruption Vulnerability in WPS Forms (CNVD-2017-34138)

WPS Office is an office software suite developed independently by Kingsoft Corporation. A memory corruption vulnerability exists in the excelrw module of formset.exe in WPS when parsing a specific xls file, which can be exploited by an attacker to cause a denial of service or code execution...

Memory Corruption Vulnerability in WPS Forms (CNVD-2017-34136)

WPS Office is an office software suite developed independently by Kingsoft Corporation. A memory corruption vulnerability exists in formset.exe in WPS when parsing certain xls files, which can be exploited by an attacker to cause a denial of service or code execution...

FreeBSD : Multiple exploitable heap-based buffer overflow vulnerabilities exists in FreeXL 1.0.3 (555cd806-b031-11e7-a369-14dae9d59f67)

Cisco TALOS reports : An exploitable heap based buffer overflow vulnerability exists in the readbiffnextrecord function of FreeXL 1.0.3. A specially crafted XLS file can cause a memory corruption resulting in remote code execution. An attacker can send malicious XLS file to trigger this...

LexMark Perceptive Document Filters XLS Convert Code Execution Vulnerability(CVE-2016-4335)

Description An exploitable buffer overflow exists in the XLS parsing of the Perspective Document Filters conversion functionality. A crafted XLS document can lead to a stack based buffer overflow resulting in remote code execution. Tested Versions Lexmark Perceptive Document Filters Product URLs...

"Unexpected error from external database driver" error when you create or open Microsoft Excel .xls files

None None...

Microsoft Windows XLS File Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Microsoft Windows. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the Microsoft...

Microsoft Windows XLS File Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Microsoft Windows. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the Microsoft...

Denial of Service Vulnerability in WPS Forms QtCore4 Module

WPS Office is an office software suite developed independently by Kingsoft Corporation. A denial of service vulnerability exists in the WPS Forms QtCore4 module, which occurs when formset.exe in WPS is parsing a specific xls file. An attacker can exploit the vulnerability to cause a denial of...

Significant FormBook Distribution Campaigns Impacting the U.S. and South Korea

We observed several high-volume FormBook malware distribution campaigns primarily taking aim at Aerospace, Defense Contractor, and Manufacturing sectors within the U.S. and South Korea during the past few months. The attackers involved in these email campaigns leveraged a variety of distribution...

Significant FormBook Distribution Campaigns Impacting the U.S. and South Korea

We observed several high-volume FormBook malware distribution campaigns primarily taking aim at Aerospace, Defense Contractor, and Manufacturing sectors within the U.S. and South Korea during the past few months. The attackers involved in these email campaigns leveraged a variety of distribution...

Buffer Overflow Vulnerability in WPS Forms

WPS Office is an office software suite developed independently by Kingsoft Corporation. A buffer overflow vulnerability exists in WPS Forms, which occurs when WPS Formset.exe is parsing a specific xls file. An attacker can exploit the vulnerability to cause a denial of service, which can lead to...

Extreme Office 2017 suffers from a memory corruption vulnerability (CNVD-2017-31181)

Extreme Office is an independently controlled office learning software developed by Beijing Haiteng Times Technology Co. Extreme Forms 2017 can create, modify and edit xls, xlsx files. A memory corruption vulnerability exists in Extreme Forms in Extreme Office when handling special xls files. An...

Extreme Office 2017 suffers from a memory corruption vulnerability (CNVD-2017-31182)

Extreme Office is an independently controlled office learning software developed by Beijing Haiteng Times Technology Co. Extreme Forms 2017 can create, modify and edit xls, xlsx files. A memory corruption vulnerability exists in Extreme Forms in Extreme Office when handling special xls files. An...

Extreme Office 2017 suffers from a memory corruption vulnerability (CNVD-2017-31180)

Extreme Office is an independently controlled office learning software developed by Beijing Haiteng Times Technology Co. Extreme Forms 2017 can create, modify and edit xls, xlsx files. A memory corruption vulnerability exists in Extreme Forms in Extreme Office when handling special xls files, whi...

Ichitaro Office Excel File Code Execution Vulnerability(CVE-2017-2790)

Summary A vulnerability was discovered within the Ichitaro word processor. Ichitaro is published by JustSystems and is considered one of the more popular word processors used within Japan. Ichitaro handles Microsoft Excel's .xls file format. When processing a record type of 0x3c from a Workbook...

Fedora 25 : freexl (2017-b7e6e4cfc1)

This update fixes a Cisco Talos CVE : 'A specially crafted XLS file can cause a memory corruption resulting in remote code execution. An attacker can send malicious XLS file to trigger this vulnerability.' Note that Tenable Network Security has extracted the preceding description block directly...

Lexmark Perceptive Document Filters XLS ShapeHLink Information Disclosure Vulnerability(CVE-2017-2806)

Summary An exploitable arbitrary read exists in the XLS parsing of the Lexmark Perspective Document Filters conversion functionality. A crafted XLS document can lead to a arbitrary read resulting in memory disclosure. The vulnerability was confirmed on versions 11.3.0.2228 and 11.3.0.2400 Tested...

AntennaHouse DMC HTMLFilter FillRowFormat Code Execution Vulnerability(CVE-2017-2783)

Summary An exploitable heap corruption vulnerability exists in the FillRowFormat functionality of AntennaHouse DMC HTMLFilter that is shipped with MarkLogic 8.0-6. A specially crafted xls file can cause a heap corruption resulting in arbitrary code execution. An attacker can send/provide maliciou...

AntennaHouse DMC HTMLFilter iBldDirInfo Code Execution Vulnerability(CVE-2017-2792)

Summary An exploitable heap corruption vulnerability exists in the iBldDirInfo functionality of AntennaHouse DMC HTMLFilter used by MarkLogic 8.0-6. A specially crafted xls file can cause a heap corruption resulting in arbitrary code execution. An attacker can provide a malicious xls file to...