CVE-2018-7437

概要

参考情報

• bugzilla.redhat.com/show_bug.cgi · Exploit
• groups.google.com/forum
• lists.debian.org/debian-lts-announce/2018/03/msg00000.html · Mailing List
• security.gentoo.org/glsa/202007-44
• debian.org/security/2018/dsa-4129 · Third Party Advisory

freexl のその他の脆弱性

• CVE-2017-2924高 8.8An exploitable heap-based buffer overflow vulnerability exists in the read_legacy_biff function of FreeXL 1.0.3. A specially crafted XLS fil…
• CVE-2017-2923高 8.8An exploitable heap based buffer overflow vulnerability exists in the 'read_biff_next_record function' of FreeXL 1.0.3. A specially crafted …
• CVE-2018-7439高 8.8An issue was discovered in FreeXL before 1.0.5. There is a heap-based buffer over-read in the function read_mini_biff_next_record.
• CVE-2018-7438高 8.8An issue was discovered in FreeXL before 1.0.5. There is a heap-based buffer over-read in the parse_unicode_string function.
• CVE-2018-7436高 8.8An issue was discovered in FreeXL before 1.0.5. There is a heap-based buffer over-read in a pointer dereference of the parse_SST function.