Approved changes feed: RSS · Atom

cpe:2.3:a:gnome:gnumeric:1.12.1:*:*:*:*:*:*:*

part: a version: 1.12.1 update: *

VendorGnome (0ee6d85f-ce9a-5064-936c-231d12a60ad5)
ProductGnumeric (2e86ea0d-f64c-5b5e-8690-c02ba18ae351)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:deb/debian/gnumeric purl2cpe 2026-06-01 10:17:24.585141
pkg:deb/ubuntu/gnumeric purl2cpe 2026-06-01 10:17:24.585143
pkg:github/gnome/gnumeric purl2cpe 2026-06-01 10:17:24.585144
pkg:rpm/fedora/gnumeric purl2cpe 2026-06-01 10:17:24.585145
pkg:rpm/opensuse/gnumeric purl2cpe 2026-06-01 10:17:24.585147

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2013-6836 vulnerable 2026-06-03 14:33:32.764755 Details available
Heap-based buffer overflow in the ms_escher_get_data function in plugins/excel/ms-escher.c in GNOME Office Gnumeric before 1.12.9 allows remote attackers to cause a denial of service (crash) via a crafted xls file with a crafted length value.
Published: 2013-12-19T02:00:00.000Z
Updated: 2024-08-06T17:46:23.906Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.