CVE-2017-2924

概要

参考情報

• securityfocus.com/bid/100799 · Broken Link
• debian.org/security/2017/dsa-3976 · Third Party Advisory
• talosintelligence.com/vulnerability_reports/TALOS-2017-0431 · Third Party Advisory

freexl のその他の脆弱性

• CVE-2017-2923高 8.8An exploitable heap based buffer overflow vulnerability exists in the 'read_biff_next_record function' of FreeXL 1.0.3. A specially crafted …
• CVE-2018-7439高 8.8An issue was discovered in FreeXL before 1.0.5. There is a heap-based buffer over-read in the function read_mini_biff_next_record.
• CVE-2018-7438高 8.8An issue was discovered in FreeXL before 1.0.5. There is a heap-based buffer over-read in the parse_unicode_string function.
• CVE-2018-7437高 8.8An issue was discovered in FreeXL before 1.0.5. There is a heap-based buffer over-read in a memcpy call of the parse_SST function.
• CVE-2018-7436高 8.8An issue was discovered in FreeXL before 1.0.5. There is a heap-based buffer over-read in a pointer dereference of the parse_SST function.