VYPR
Unrated severityNVD Advisory· Published Apr 24, 2018· Updated Sep 17, 2024

CVE-2017-12108

CVE-2017-12108

Description

An exploitable integer overflow vulnerability exists in the xls_preparseWorkSheet function of libxls 1.4 when handling a MULBLANK record. A specially crafted XLS file can cause a memory corruption resulting in remote code execution. An attacker can send malicious XLS file to trigger this vulnerability.

Affected products

1
  • Range: 1.4 readxl package 1.0.0 for R (tested using Microsoft R 4.3.1)

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

1

News mentions

0

No linked articles in our index yet.