CVE-2017-12111
NONE EPSS 79.2%
Published Nov 20, 20178y ago · Modified Jun 17, 20262w ago
Published Nov 20, 2017 8y ago
Last Modified Jun 17, 2026 2w ago
Description
An exploitable out-of-bounds vulnerability exists in the xls_addCell function of libxls 1.4. A specially crafted XLS file with a formula record can cause memory corruption resulting in remote code execution. An attacker can send a malicious XLS file to trigger this vulnerability.
Threat Intelligence
EPSS Exploit Probability
79.2% percentile
Exploit & Patch Status
No Known Exploit
No Patch Available
Weaknesses 1
CWE-787 Out-of-bounds Write Memory Safety
Affected Products 1
| Vendor | Product | Version | Range |
|---|---|---|---|
| libxls_project | libxls | 1.4 | any |
References 3
- security.gentoo.org https://security.gentoo.org/glsa/202003-64
- debian.org https://www.debian.org/security/2018/dsa-4173
- talosintelligence.com https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0463
Remediation
No remediation data recorded yet
Check vendor advisories and the NVD entry for patch availability.