CVE-2017-12108: Integer Overflow

Published Apr 24, 2018

Updated

An exploitable integer overflow vulnerability exists in the xlspreparseWorkSheet function of libxls 1.4 when handling a MULBLANK record. A specially crafted XLS file can cause a memory corruption resulting in remote code execution. An attacker can send malicious XLS file to trigger this vulnerability.

Affected Software

1 affected component

Libxls Project Libxls=1.4

Event History

Apr 24, 2018

CVE Published

via MITRE·07:00 PM

Data Sourced

via MITRE·07:00 PM

DescriptionSeverityWeakness

Frequently Asked Questions

What is CVE-2017-12108?

CVE-2017-12108 is an integer overflow vulnerability in the xls_preparseWorkSheet function of libxls 1.4 that can lead to remote code execution.

What software is affected by CVE-2017-12108?

The affected software is Libxls Project Libxls version 1.4.

How severe is CVE-2017-12108?

CVE-2017-12108 has a severity rating of 8.8 (high).

How can CVE-2017-12108 be exploited?

CVE-2017-12108 can be exploited by sending a specially crafted XLS file that triggers a memory corruption resulting in remote code execution.

Where can I find more information about CVE-2017-12108?

You can find more information about CVE-2017-12108 at the following link: [https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0460]