CVE-2024-48877: Buffer Overflow
A memory corruption vulnerability exists in the Shared String Table Record Parser implementation in xls2csv utility version 0.95. A specially crafted malformed file can lead to a heap buffer overflow. An attacker can provide a malicious file to trigger this vulnerability.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/catdocto a version that resolves this vulnerability.Fixed in 1:0.95-6~deb12u1 - Upgrade
Upgrade
debian/catdocto a version that resolves this vulnerability.Fixed in 1:0.95-6 - Upgrade
Upgrade
debian/catdocto a version that resolves this vulnerability.Fixed in 1:0.95-6~deb12u1Fixed in 1:0.95-6
Event History
Frequently Asked Questions
What is the severity of CVE-2024-48877?
CVE-2024-48877 has been rated with a medium severity due to its potential for causing memory corruption and allowing attackers to exploit the vulnerability.
How do I fix CVE-2024-48877?
To fix CVE-2024-48877, you should update the xls2csv utility to the latest version where this vulnerability has been addressed.
What type of vulnerability is CVE-2024-48877?
CVE-2024-48877 is a memory corruption vulnerability caused by a heap buffer overflow in the Shared String Table Record Parser of the xls2csv utility.
What can an attacker do with CVE-2024-48877?
An attacker can exploit CVE-2024-48877 by providing a specially crafted malformed file to trigger the memory corruption and potentially execute arbitrary code.
Which software versions are affected by CVE-2024-48877?
CVE-2024-48877 affects the xls2csv utility version 0.95 and possibly earlier versions.