Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-2x4q-h3hx-hhh6

Опубликовано: 02 июн. 2025
Источник: github
Github: Не прошло ревью
CVSS3: 8.4

Описание

A memory corruption vulnerability exists in the Shared String Table Record Parser implementation in xls2csv utility version 0.95. A specially crafted malformed file can lead to a heap buffer overflow. An attacker can provide a malicious file to trigger this vulnerability.

A memory corruption vulnerability exists in the Shared String Table Record Parser implementation in xls2csv utility version 0.95. A specially crafted malformed file can lead to a heap buffer overflow. An attacker can provide a malicious file to trigger this vulnerability.

EPSS

Процентиль: 9%
0.00033
Низкий

8.4 High

CVSS3

Дефекты

CWE-680
CWE-787

Связанные уязвимости

CVSS3: 8.4
ubuntu
6 месяцев назад

A memory corruption vulnerability exists in the Shared String Table Record Parser implementation in xls2csv utility version 0.95. A specially crafted malformed file can lead to a heap buffer overflow. An attacker can provide a malicious file to trigger this vulnerability.

CVSS3: 8.4
nvd
6 месяцев назад

A memory corruption vulnerability exists in the Shared String Table Record Parser implementation in xls2csv utility version 0.95. A specially crafted malformed file can lead to a heap buffer overflow. An attacker can provide a malicious file to trigger this vulnerability.

CVSS3: 8.4
debian
6 месяцев назад

A memory corruption vulnerability exists in the Shared String Table Re ...

CVSS3: 7.8
fstec
6 месяцев назад

Уязвимость утилиты преобразования файлов xls2csv, связанная с записью за пределами допустимого диапазона, позволяющая нарушителю вызвать отказ в обслуживании

CVSS3: 7.8
redos
около 2 месяцев назад

Множественные уязвимости catdoc

EPSS

Процентиль: 9%
0.00033
Низкий

8.4 High

CVSS3

Дефекты

CWE-680
CWE-787