Note:
This project will be discontinued after December 13, 2021. [more]
2017-11-20
An exploitable integer overflow vulnerability exists in the xls_appendSST function of libxls 1.4.A specially crafted XLS file can cause memory corruption resulting in remote code execution.
| Products | Libxls |
| Type | Integer Overflow or Wraparound (CWE-190) |
| First patch | - None (likely due to unavailable code) |
| Links |
• https://www.debian.org/security/2018/dsa-4173
• https://security.gentoo.org/glsa/202003-64 • https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0462 |