CVE-2019-5033: Critical severity aspose.cells vulnerability
Published Aug 21, 2019
·Updated
An exploitable out-of-bounds read vulnerability exists in the Number record parser of Aspose Aspose.Cells 19.1.0 library. A specially crafted XLS file can cause an out-of-bounds read, resulting in remote code execution. An attacker needs to provide a malformed file to the victim to trigger the vulnerability.
Affected Software
1 affected component
Aspose Aspose.Cells=19.1.0
Event History
Aug 21, 2019
CVE Published
via MITRE·05:01 PM
Data Sourced
via MITRE·05:01 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2019-5033?
CVE-2019-5033 is considered a critical vulnerability due to its potential for remote code execution.
2
How do I fix CVE-2019-5033?
To fix CVE-2019-5033, upgrade to a patched version of Aspose.Cells beyond 19.1.0.
3
What causes the CVE-2019-5033 vulnerability?
CVE-2019-5033 is caused by an out-of-bounds read in the Number record parser of Aspose.Cells.
4
What types of attacks can exploit CVE-2019-5033?
CVE-2019-5033 can be exploited when an attacker provides a specially crafted XLS file to the victim.
5
Which software versions are affected by CVE-2019-5033?
CVE-2019-5033 affects Aspose.Cells version 19.1.0.