Approved changes feed: RSS · Atom

cpe:2.3:a:libxls:libxls:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorLibxls (a1e256cd-5b50-5e2b-b193-7f815807c8f9)
ProductLibxls (684eca5f-b888-5aa0-8c73-148d7308829a)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2017-2919 vulnerable 2026-06-08 05:09:26.139083 Details available
HIGH (8.8)
An exploitable stack based buffer overflow vulnerability exists in the xls_getfcell function of libxls 1.3.4. A specially crafted XLS file can cause a memory corruption resulting in remote code execution. An attacker can send malicious XLS file to trigger this vulnerability
Published: 2017-11-20T22:00:00.000Z
Updated: 2024-09-17T00:01:43.511Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-2897 vulnerable 2026-06-08 05:09:26.121861 Details available
HIGH (8.8)
An exploitable out-of-bounds write vulnerability exists in the read_MSAT function of libxls 1.4. A specially crafted XLS file can cause a memory corruption resulting in remote code execution. An attacker can send malicious XLS file to trigger this vulnerability.
Published: 2017-11-20T22:00:00.000Z
Updated: 2024-09-16T20:17:24.866Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-2896 vulnerable 2026-06-08 05:09:26.120573 Details available
HIGH (8.8)
An exploitable out-of-bounds write vulnerability exists in the xls_mergedCells function of libxls 1.4. . A specially crafted XLS file can cause a memory corruption resulting in remote code execution. An attacker can send malicious XLS file to trigger this vulnerability.
Published: 2017-11-20T22:00:00.000Z
Updated: 2024-09-16T23:50:50.374Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-12111 vulnerable 2026-06-08 05:08:45.308417 Details available
HIGH (8.8)
An exploitable out-of-bounds vulnerability exists in the xls_addCell function of libxls 1.4. A specially crafted XLS file with a formula record can cause memory corruption resulting in remote code execution. An attacker can send a malicious XLS file to trigger this vulnerability.
Published: 2017-11-20T22:00:00.000Z
Updated: 2024-09-16T18:19:15.759Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-12110 vulnerable 2026-06-08 05:08:45.308025 Details available
HIGH (8.8)
An exploitable integer overflow vulnerability exists in the xls_appendSST function of libxls 1.4.A specially crafted XLS file can cause memory corruption resulting in remote code execution.
Published: 2017-11-20T22:00:00.000Z
Updated: 2024-09-17T00:11:20.704Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-12109 vulnerable 2026-06-08 05:08:45.302924 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-12108 vulnerable 2026-06-08 05:08:45.301724 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.