Heap overflow

When processing a record type of 0x3c from a Workbook stream from an Excel file .xls, JustSystems Ichitaro Office trusts that the size is greater than zero, subtracts one from the length, and uses this result as the size for a memcpy. This results in a heap-based buffer overflow and can lead to...

CVE-2017-2790

CVE-2017-2790 affects JustSystems Ichitaro Office (Excel .xls handling). A heap-based buffer overflow arises when processing a Workbook record type 0x3c: the code reads a size, subtracts one, and uses the result as the memcpy length. An unchecked integer underflow (size becomes 0xffff) can be tri...

CVE-2016-4335

An exploitable buffer overflow exists in the XLS parsing of the Lexmark Perspective Document Filters conversion functionality. A crafted XLS document can lead to a stack based buffer overflow resulting in remote code execution...

Stack overflow

An exploitable buffer overflow exists in the XLS parsing of the Lexmark Perspective Document Filters conversion functionality. A crafted XLS document can lead to a stack based buffer overflow resulting in remote code execution...

CVE-2016-4335

An exploitable buffer overflow exists in the XLS parsing of the Lexmark Perspective Document Filters conversion functionality. A crafted XLS document can lead to a stack based buffer overflow resulting in remote code execution...

CVE-2016-4335

CVE-2016-4335 is a stack-based buffer overflow in Lexmark Perceptive Document Filters during XLS parsing. The root cause is reading a user-controlled size from the header (MSOFBH) and using it for a memcpy into a fixed-size stack buffer, which, for a specific header instance (notably 0xF016, a ms...

Threat Outbreak Alert RuleID26652: Email Messages Distributing Malicious Software on November 30, 2016

Medium Alert ID: 49912 First Published: 2016 November 30 19:11 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID26652 may contain the following files: Name |...

Threat Outbreak Alert RuleID26351: Email Messages Distributing Malicious Software on November 15, 2016

Medium Alert ID: 49728 First Published: 2016 November 15 20:34 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID26351 may contain the following files: Name |...

LexMark Perceptive Document Filters XLS Convert Code Execution Vulnerability

Talos Vulnerability Report TALOS-2016-0172 LexMark Perceptive Document Filters XLS Convert Code Execution Vulnerability August 6, 2016 CVE Number CVE-2016-4335 Description An exploitable buffer overflow exists in the XLS parsing of the Perspective Document Filters conversion functionality. A...

Threat Outbreak Alert RuleID23023: Email Messages Distributing Malicious Software on May 21, 2016

Medium Alert ID: 46325 First Published: 2016 May 23 14:14 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID23023 may contain the following files: Name | Size...

XLS-Medical Abnehm-App - External URLs, SD-card access, SQLite database found vulnerabilities

HackApp vulnerability scanner discovered that application XLS-Medical Abnehm-App published at the 'play' market has multiple vulnerabilities...

Threat Outbreak Alert RuleID21176: Email Messages Distributing Malicious Software on February 19, 2016

Medium Alert ID: 43653 First Published: 2016 February 19 21:21 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID21176 may contain the following files: Name |...

Threat Outbreak Alert RuleID21136: Email Messages Distributing Malicious Software on February 18, 2016

Medium Alert ID: 43610 First Published: 2016 February 18 16:49 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID21136 may contain the following files: Name |...

Threat Outbreak Alert RuleID19784: Email Messages Distributing Malicious Software on December 1, 2015

Medium Alert ID: 42427 First Published: 2015 December 1 20:55 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID19784 may contain the following files: Name |...

Threat Outbreak Alert RuleID19387: Email Messages Distributing Malicious Software on November 13, 2015

Medium Alert ID: 42079 First Published: 2015 November 13 16:44 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID19387 may contain the following files: Name |...

Threat Outbreak Alert RuleID17409: Email Messages Distributing Malicious Software on August 16, 2015

Medium Alert ID: 40527 First Published: 2015 August 17 14:18 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID17409 may contain the following files: Name |...

Threat Outbreak Alert RuleID16829: Email Messages Distributing Malicious Software on July 21, 2015

Medium Alert ID: 40078 First Published: 2015 July 22 12:23 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID16829 may contain the following files: Name | Siz...

Microsoft Excel Sheet Name Memory Corruption - Ver2 (CVE-2007-3490)

Microsoft Excel is a popular spreadsheet application that is usually released as part of the Microsoft Office suite. The application can create complex spreadsheets with multiple workbooks, formulae, and various data sources. The proprietary file format used for storing Microsoft Excel documents ...

Microsoft Excel Sheet Name Memory Corruption - Ver2 (CVE-2007-3490)

Microsoft Excel is a popular spreadsheet application that is usually released as part of the Microsoft Office suite. The application can create complex spreadsheets with multiple workbooks, formulae, and various data sources. The proprietary file format used for storing Microsoft Excel documents ...

Fedora 20 : freexl-1.0.0i-1.fc20 (2015-3372)

Four potentially harmful bugs causing crashes and stack corruption were detected in FreeXL by American Fuzzy Lop and are solved in this release. Please note: such issues are never realistically expected to be encountered in real world XLS spreadsheets, anyway some purposely forged XLS document...