ALT Linux Team

Package freexl update in sisyphus on 2015-03-10

ALT-PU-2015-1268-1

Package freexl updated to version 1.0.0i-alt1 for branch sisyphus in task 141641.

Closed vulnerabilities

Published: 2015-03-31
Modified: 2024-11-21

CVE-2015-2753

FreeXL before 1.0.0i allows remote attackers to cause a denial of service (stack corruption) or possibly execute arbitrary code via a crafted sector in a workbook.

Severity: MEDIUM (6.8)
References:
Published: 2015-03-31
Modified: 2024-11-21

CVE-2015-2754

FreeXL before 1.0.0i allows remote attackers to cause a denial of service (stack corruption) and possibly execute arbitrary code via a crafted workbook, related to a "premature EOF."

Severity: MEDIUM (6.8)
References:
Published: 2015-03-31
Modified: 2024-11-21

CVE-2015-2776

The parse_SST function in FreeXL before 1.0.0i allows remote attackers to cause a denial of service (memory consumption) via a crafted shared strings table in a workbook.

Severity: MEDIUM (4.3)
References:
VKontakte | Telegram | YouTube | Forum | GitHub | Bugzilla
Version: 2.1.0
Back to top