Beveiligingsadvies

CVE-2017-2897

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2017-11-20 22:00:00
Laatst bijgewerkt 2024-09-16 20:17:24
Toegewezen door talos
CVSS-score 8.8
Status PUBLISHED

Beschrijving

An exploitable out-of-bounds write vulnerability exists in the read_MSAT function of libxls 1.4. A specially crafted XLS file can cause a memory corruption resulting in remote code execution. An attacker can send malicious XLS file to trigger this vulnerability.