CVE-2019-5032: Critical severity aspose.cells vulnerability
An exploitable out-of-bounds read vulnerability exists in the LabelSst record parser of Aspose Aspose.Cells 19.1.0 library. A specially crafted XLS file can cause an out-of-bounds read, resulting in remote code execution. An attacker needs to provide a malformed file to the victim to trigger the vulnerability.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2019-5032?
CVE-2019-5032 has a high severity rating due to the potential for remote code execution.
How do I fix CVE-2019-5032?
To fix CVE-2019-5032, upgrade to a patched version of the Aspose.Cells library that addresses the vulnerability.
What software is affected by CVE-2019-5032?
CVE-2019-5032 specifically affects Aspose.Cells version 19.1.0.
What kind of attack is possible with CVE-2019-5032?
An attacker can exploit CVE-2019-5032 to perform an out-of-bounds read and potentially execute remote code using a specially crafted XLS file.
How can I identify if my application is vulnerable to CVE-2019-5032?
You can identify vulnerability to CVE-2019-5032 by checking if your application uses Aspose.Cells version 19.1.0 and reviewing how it processes XLS files.