VYPR
Unrated severityNVD Advisory· Published Apr 24, 2018· Updated Sep 16, 2024

CVE-2017-12109

CVE-2017-12109

Description

An exploitable integer overflow vulnerability exists in the xls_preparseWorkSheet function of libxls 1.4 when handling a MULRK record. A specially crafted XLS file can cause a memory corruption resulting in remote code execution. An attacker can send malicious XLS file to trigger this vulnerability.

Affected products

1
  • Range: 1.4 readxl package 1.0.0 for R (tested using Microsoft R 4.3.1)

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

1

News mentions

0

No linked articles in our index yet.