CVE-2017-2923

概要

参考情報

• securityfocus.com/bid/100807 · Broken Link
• debian.org/security/2017/dsa-3976 · Third Party Advisory
• talosintelligence.com/vulnerability_reports/TALOS-2017-0430 · Third Party Advisory

freexl のその他の脆弱性

• CVE-2017-2924高 8.8An exploitable heap-based buffer overflow vulnerability exists in the read_legacy_biff function of FreeXL 1.0.3. A specially crafted XLS fil…
• CVE-2018-7439高 8.8An issue was discovered in FreeXL before 1.0.5. There is a heap-based buffer over-read in the function read_mini_biff_next_record.
• CVE-2018-7438高 8.8An issue was discovered in FreeXL before 1.0.5. There is a heap-based buffer over-read in the parse_unicode_string function.
• CVE-2018-7437高 8.8An issue was discovered in FreeXL before 1.0.5. There is a heap-based buffer over-read in a memcpy call of the parse_SST function.
• CVE-2018-7436高 8.8An issue was discovered in FreeXL before 1.0.5. There is a heap-based buffer over-read in a pointer dereference of the parse_SST function.