Thilo Pfennig and Morten Welinder discovered that the XLS spreadsheet
handling code in Gnumeric did not correctly calculate needed memory sizes.
If a user or automated system were tricked into loading a specially crafted
XLS document, a remote attacker could execute arbitrary code with user
privileges.
OS | Version | Architecture | Package | Version | Filename |
---|---|---|---|---|---|
Ubuntu | 7.10 | noarch | gnumeric | < 1.7.11-1ubuntu3.1 | UNKNOWN |
Ubuntu | 7.10 | noarch | gnumeric-gtk | < 1.7.11-1ubuntu3.1 | UNKNOWN |
Ubuntu | 7.10 | noarch | gnumeric-plugins-extra | < 1.7.11-1ubuntu3.1 | UNKNOWN |
Ubuntu | 7.04 | noarch | gnumeric | < 1.7.8-0ubuntu1.1 | UNKNOWN |
Ubuntu | 7.04 | noarch | gnumeric-gtk | < 1.7.8-0ubuntu1.1 | UNKNOWN |
Ubuntu | 7.04 | noarch | gnumeric-plugins-extra | < 1.7.8-0ubuntu1.1 | UNKNOWN |
Ubuntu | 6.10 | noarch | gnumeric | < 1.7.0-1ubuntu4.1 | UNKNOWN |
Ubuntu | 6.10 | noarch | gnumeric-gtk | < 1.7.0-1ubuntu4.1 | UNKNOWN |
Ubuntu | 6.10 | noarch | gnumeric-plugins-extra | < 1.7.0-1ubuntu4.1 | UNKNOWN |
Ubuntu | 6.06 | noarch | gnumeric | < 1.6.3-0ubuntu4.1 | UNKNOWN |