Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-2x4q-h3hx-hhh6

Опубликовано: 02 июн. 2025
Источник: github
Github: Не прошло ревью
CVSS3: 8.4

Описание

A memory corruption vulnerability exists in the Shared String Table Record Parser implementation in xls2csv utility version 0.95. A specially crafted malformed file can lead to a heap buffer overflow. An attacker can provide a malicious file to trigger this vulnerability.

A memory corruption vulnerability exists in the Shared String Table Record Parser implementation in xls2csv utility version 0.95. A specially crafted malformed file can lead to a heap buffer overflow. An attacker can provide a malicious file to trigger this vulnerability.

EPSS

Процентиль: 21%
0.00284
Низкий

8.4 High

CVSS3

Дефекты

CWE-680
CWE-787

Связанные уязвимости

CVSS3: 8.4
ubuntu
около 1 года назад

A memory corruption vulnerability exists in the Shared String Table Record Parser implementation in xls2csv utility version 0.95. A specially crafted malformed file can lead to a heap buffer overflow. An attacker can provide a malicious file to trigger this vulnerability.

CVSS3: 8.4
nvd
около 1 года назад

A memory corruption vulnerability exists in the Shared String Table Record Parser implementation in xls2csv utility version 0.95. A specially crafted malformed file can lead to a heap buffer overflow. An attacker can provide a malicious file to trigger this vulnerability.

CVSS3: 8.4
debian
около 1 года назад

A memory corruption vulnerability exists in the Shared String Table Re ...

CVSS3: 7.8
fstec
около 1 года назад

Уязвимость утилиты преобразования файлов xls2csv, связанная с записью за пределами допустимого диапазона, позволяющая нарушителю вызвать отказ в обслуживании

CVSS3: 7.8
redos
10 месяцев назад

Множественные уязвимости catdoc

EPSS

Процентиль: 21%
0.00284
Низкий

8.4 High

CVSS3

Дефекты

CWE-680
CWE-787