Heap-based buffer overflow in FreeXL - CVE-2017-2923
Published: September 12, 2017 / Updated: March 20, 2018
Vulnerability identifier: #VU8243
CSH Severity: High
CVSS v4: 8.6 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]
CVE-ID: CVE-2017-2923
CWE-ID: CWE-122
Exploitation vector: Remote access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a remote attacker to execute arbitrary code on the target system.
The weakness exists in the read_biff_next_record function due to heap-based buffer overflow while processing crafted XLS files. A remote attacker can trick the victim into opening a specially crafted XLS file trigger memory corruption and execute arbitrary code with privileges of the current user.
Successful exploitation of the vulnerability may result in system compromise.
The weakness exists in the read_biff_next_record function due to heap-based buffer overflow while processing crafted XLS files. A remote attacker can trick the victim into opening a specially crafted XLS file trigger memory corruption and execute arbitrary code with privileges of the current user.
Successful exploitation of the vulnerability may result in system compromise.
Affected software
FreeXL
Debian Linux
Fedora
freexl
Debian Linux
Fedora
freexl
How to mitigate CVE-2017-2923
Update to version 1.0.4.
freexl - addressed in versions 1.0.4-1.el6, 1.0.4-1.el7