Description

Buffer Overflow vulnerability in libxlsv.1.6.2 allows a remote attacker to execute arbitrary code and cause a denial of service via a crafted XLS file to the unicode_decode_wcstombs function in xlstool.c:266.

Related CPE's

a

libxls_project

libxls

1.6.2

Vulnerable

References

https://github.com/libxls/libxls/issues/124

ExploitIssue Tracking

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JQYGEBDBCOWBRHOW44BSSRADUOZBXHUE/

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YHBUPYF2NX34HNAWZ3WYHKWU3KWVQUSV/

https://github.com/libxls/libxls/issues/124

ExploitIssue Tracking

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JQYGEBDBCOWBRHOW44BSSRADUOZBXHUE/

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YHBUPYF2NX34HNAWZ3WYHKWU3KWVQUSV/

https://lists.fedoraproject.org/archives/list/[email protected]/message/JQYGEBDBCOWBRHOW44BSSRADUOZBXHUE/

https://lists.fedoraproject.org/archives/list/[email protected]/message/YHBUPYF2NX34HNAWZ3WYHKWU3KWVQUSV/

Weaknesses

[email protected]

Primary
CWE-787

CVSS impact metrics

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

6.5 · Medium

Information

Source identifier

[email protected]

Vulnerability status

Modified

Published

2023-08-15T15:15:10.760Z

2 years ago

Last modified

2025-11-04T21:15:53.637Z

2 months ago