CVE-2017-12110
NONE EPSS 79.4%
Published Nov 20, 20178y ago · Modified Jun 17, 20262w ago
Published Nov 20, 2017 8y ago
Last Modified Jun 17, 2026 2w ago
Description
An exploitable integer overflow vulnerability exists in the xls_appendSST function of libxls 1.4.A specially crafted XLS file can cause memory corruption resulting in remote code execution.
Threat Intelligence
EPSS Exploit Probability
79.4% percentile
Exploit & Patch Status
No Known Exploit
No Patch Available
Weaknesses 1
CWE-190 Integer Overflow or Wraparound Numeric Error
Affected Products 1
| Vendor | Product | Version | Range |
|---|---|---|---|
| libxls_project | libxls | 1.4 | any |
References 3
- security.gentoo.org https://security.gentoo.org/glsa/202003-64
- debian.org https://www.debian.org/security/2018/dsa-4173
- talosintelligence.com https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0462
Remediation
No remediation data recorded yet
Check vendor advisories and the NVD entry for patch availability.