Описание
A memory corruption vulnerability exists in the Shared String Table Record Parser implementation in xls2csv utility version 0.95. A specially crafted malformed file can lead to a heap buffer overflow. An attacker can provide a malicious file to trigger this vulnerability.
| Релиз | Статус | Примечание |
|---|---|---|
| devel | not-affected | 1:0.95-6build1 |
| esm-apps-legacy/xenial | released | 1:0.94.3~git20160113.dbc9ec6+dfsg-1+deb9u1ubuntu0.1~esm1 |
| esm-apps/bionic | released | 1:0.95-4.1ubuntu0.18.04.1~esm1 |
| esm-apps/focal | released | 1:0.95-4.1ubuntu0.20.04.1~esm1 |
| esm-apps/jammy | released | 1:0.95-5ubuntu0.22.04.1~esm1 |
| esm-apps/noble | released | 1:0.95-5ubuntu0.24.04.1~esm1 |
| esm-apps/resolute | not-affected | 1:0.95-6build1 |
| esm-apps/xenial | ignored | end of ESM support, was needs-triage |
| focal | ignored | end of standard support, was needs-triage |
| jammy | needed |
Показывать по
EPSS
7.8 High
CVSS3
Связанные уязвимости
A memory corruption vulnerability exists in the Shared String Table Record Parser implementation in xls2csv utility version 0.95. A specially crafted malformed file can lead to a heap buffer overflow. An attacker can provide a malicious file to trigger this vulnerability.
A memory corruption vulnerability exists in the Shared String Table Re ...
A memory corruption vulnerability exists in the Shared String Table Record Parser implementation in xls2csv utility version 0.95. A specially crafted malformed file can lead to a heap buffer overflow. An attacker can provide a malicious file to trigger this vulnerability.
Уязвимость утилиты преобразования файлов xls2csv, связанная с записью за пределами допустимого диапазона, позволяющая нарушителю вызвать отказ в обслуживании
EPSS
7.8 High
CVSS3