GCVE - cpe:2.3:a:gnome:gnumeric:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:gnome:gnumeric:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Gnome (`0ee6d85f-ce9a-5064-936c-231d12a60ad5`)
Product	Gnumeric (`2e86ea0d-f64c-5b5e-8690-c02ba18ae351`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from purl2cpe mapping

PURL mappings

PURL	Source	Last updated
`pkg:deb/debian/gnumeric`	purl2cpe	2026-06-01 10:17:24.585127
`pkg:deb/ubuntu/gnumeric`	purl2cpe	2026-06-01 10:17:24.585129
`pkg:github/gnome/gnumeric`	purl2cpe	2026-06-01 10:17:24.585130
`pkg:rpm/fedora/gnumeric`	purl2cpe	2026-06-01 10:17:24.585132
`pkg:rpm/opensuse/gnumeric`	purl2cpe	2026-06-01 10:17:24.585133

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2013-6836`	vulnerable	2026-06-08 05:05:07.129241	Details available Heap-based buffer overflow in the ms_escher_get_data function in plugins/excel/ms-escher.c in GNOME Office Gnumeric before 1.12.9 allows remote attackers to cause a denial of service (crash) via a crafted xls file with a crafted length value. Published: 2013-12-19T02:00:00.000Z Updated: 2024-08-06T17:46:23.906Z Open on db.gcve.eu Reference links http://lists.opensuse.org/opensuse-updates/2014-02/msg00018.html https://git.gnome.org/browse/gnumeric/commit/?id=b5480b69345b3c6d56ee0ed9c9e9880bb2a08cdc http://www.securityfocus.com/bid/64459 https://bugzilla.gnome.org/show_bug.cgi?id=712772 https://projects.gnome.org/gnumeric/announcements/1.12/gnumeric-1.12.9.shtml	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2009-0318`	vulnerable	2026-06-08 04:51:08.852175	Details available Untrusted search path vulnerability in the GObject Python interpreter wrapper in Gnumeric allows local users to execute arbitrary code via a Trojan horse Python file in the current working directory, related to a vulnerability in the PySys_SetArgv function (CVE-2008-5983). Published: 2009-01-28T11:00:00.000Z Updated: 2024-08-07T04:31:25.601Z Open on db.gcve.eu Reference links https://bugzilla.redhat.com/show_bug.cgi?id=481572 http://www.openwall.com/lists/oss-security/2009/01/26/2 http://bugzilla.gnome.org/show_bug.cgi?id=569648 http://secunia.com/advisories/33823 http://www.securityfocus.com/bid/33438	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2008-0668`	vulnerable	2026-06-08 04:50:17.423558	Details available The excel_read_HLINK function in plugins/excel/ms-excel-read.c in Gnome Office Gnumeric before 1.8.1 allows user-assisted remote attackers to execute arbitrary code via a crafted XLS file containing XLS HLINK opcodes, possibly because of an integer signedness error that leads to an integer overflow. NOTE: some of these details are obtained from third party information. Published: 2008-02-11T20:00:00.000Z Updated: 2024-08-07T07:54:22.784Z Open on db.gcve.eu Reference links http://www.vupen.com/english/advisories/2008/0462 http://www.gnome.org/projects/gnumeric/announcements/1.8/gnumeric-1.8.1.shtml http://secunia.com/advisories/28948 https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00114.html http://www.ubuntu.com/usn/usn-604-1	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.