Vulnerabilities
Products Security index
Vulnerabilities
CVE-2017-2923
An exploitable heap based buffer overflow vulnerability exists in the 'read_biff_next_record function' of FreeXL 1.0.3. A specially crafted XLS file can cause a memory corruption resulting in remote code execution. An attacker can send malicious XLS file to trigger this vulnerability.
CVE-2017-2924
An exploitable heap-based buffer overflow vulnerability exists in the read_legacy_biff function of FreeXL 1.0.3. A specially crafted XLS file can cause a memory corruption resulting in remote code execution. An attacker can send malicious XLS file to trigger this vulnerability.
CVE-2018-7439
freexl: heap-based buffer over-read in the function read_mini_biff_next_record
CVE-2018-7436
freexl: heap-buffer-overflow in parse_SST parse_SST in freexl.c
CVE-2018-7435
freexl: heap-buffer-overflow in freexl::destroy_cell
