| Max CVSS | 6.8 | Min CVSS | 4.3 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2017-2897 | 6.8 |
An exploitable out-of-bounds write vulnerability exists in the read_MSAT function of libxls 1.4. A specially crafted XLS file can cause a memory corruption resulting in remote code execution. An attacker can send malicious XLS file to trigger this vu
|
13-06-2022 - 19:16 | 20-11-2017 - 22:29 | |
| CVE-2017-2919 | 6.8 |
An exploitable stack based buffer overflow vulnerability exists in the xls_getfcell function of libxls 1.3.4. A specially crafted XLS file can cause a memory corruption resulting in remote code execution. An attacker can send malicious XLS file to tr
|
13-06-2022 - 19:05 | 20-11-2017 - 22:29 | |
| CVE-2017-2896 | 6.8 |
An exploitable out-of-bounds write vulnerability exists in the xls_mergedCells function of libxls 1.4. . A specially crafted XLS file can cause a memory corruption resulting in remote code execution. An attacker can send malicious XLS file to trigger
|
03-06-2022 - 19:51 | 20-11-2017 - 22:29 | |
| CVE-2017-12111 | 6.8 |
An exploitable out-of-bounds vulnerability exists in the xls_addCell function of libxls 1.4. A specially crafted XLS file with a formula record can cause memory corruption resulting in remote code execution. An attacker can send a malicious XLS file
|
19-04-2022 - 19:15 | 20-11-2017 - 22:29 | |
| CVE-2017-12110 | 6.8 |
An exploitable integer overflow vulnerability exists in the xls_appendSST function of libxls 1.4.A specially crafted XLS file can cause memory corruption resulting in remote code execution.
|
19-04-2022 - 19:15 | 20-11-2017 - 22:29 | |
| CVE-2018-20450 | 4.3 |
The read_MSAT function in ole.c in libxls 1.4.0 has a double free that allows attackers to cause a denial of service (application crash) via a crafted file, a different vulnerability than CVE-2017-2897.
|
30-03-2020 - 17:15 | 25-12-2018 - 17:29 | |
| CVE-2018-20452 | 6.8 |
The read_MSAT_body function in ole.c in libxls 1.4.0 has an invalid free that allows attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted file, because of inconsistent memory management (n
|
30-03-2020 - 17:15 | 25-12-2018 - 17:29 |