CVE-2017-2896: High severity libxls vulnerability
An exploitable out-of-bounds write vulnerability exists in the xlsmergedCells function of libxls 1.4. . A specially crafted XLS file can cause a memory corruption resulting in remote code execution. An attacker can send malicious XLS file to trigger this vulnerability.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2017-2896?
The severity of CVE-2017-2896 is high, with a CVSS score of 7.8.
How does CVE-2017-2896 affect libxls?
CVE-2017-2896 affects libxls versions 1.4 and can cause a memory corruption resulting in remote code execution.
What is the remedy for CVE-2017-2896 in the r-cran-readxl package (Debian)?
To fix CVE-2017-2896 in the r-cran-readxl package (Debian), update to version 1.4.2-1 or later.
How can I mitigate CVE-2017-2896 in Libxls Project Libxls?
To mitigate CVE-2017-2896 in Libxls Project Libxls, update to version 1.4 or later.
Are there any additional references for CVE-2017-2896?
Yes, you can find additional information about CVE-2017-2896 at the following references: [link1](https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0403), [link2](https://security-tracker.debian.org/tracker/CVE-2017-2896), [link3](https://security.gentoo.org/glsa/202003-64).