CVE-2023-38853: Buffer Overflow
Published Aug 15, 2023
·Updated
Buffer Overflow vulnerability in libxlsv.1.6.2 allows a remote attacker to execute arbitrary code and cause a denial of service via a crafted XLS file to the xlsparseWorkBook function in xls.c:1015.
Affected Software
1 affected component
Libxls Project Libxls=1.6.2
Event History
Aug 15, 2023
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Frequently Asked Questions
1
What is the vulnerability ID for this issue?
The vulnerability ID for this issue is CVE-2023-38853.
2
What is the affected software version?
The affected software version is libxlsv.1.6.2.
3
What is the severity rating of this vulnerability?
The severity rating of this vulnerability is medium with a CVSS score of 6.5.
4
How can a remote attacker exploit this vulnerability?
A remote attacker can exploit this vulnerability by sending a crafted XLS file to the xls_parseWorkBook function in xls.c:1015, leading to a buffer overflow and potential execution of arbitrary code.
5
Is there a fix available for this vulnerability?
Yes, there is a fix available for this vulnerability. It is recommended to update libxlsv to a version that has addressed this issue.