CVE-2017-12108

Summary

An exploitable integer overflow vulnerability exists in the xls_preparseWorkSheet function of libxls 1.4 when handling a MULBLANK record. A specially crafted XLS file can cause a memory corruption resulting in remote code execution. An attacker can send malicious XLS file to trigger this vulnerability.

Affected Software

VendorProductVersion RangeStatus
libxlslibxls1.4 readxl package 1.0.0 for R (tested using Microsoft R 4.3.1)affected

Weaknesses

  • remote code execution

ADP Enrichment

CVE Program Container

Additional References

References