FreeXL before 1.0.0i allows remote attackers to cause a denial of service (stack corruption) and possibly execute arbitrary code via a crafted workbook, related to a "premature EOF."
CVSS 2.0MEDIUM 6.8·Network·No auth·Interaction —·EPSS 0.0334·Published 2015-03-31·Will not fixCWE-20
FreeXL before 1.0.0i allows remote attackers to cause a denial of service (stack corruption) or possibly execute arbitrary code via a crafted sector in a workbook.
CVSS 2.0MEDIUM 6.8·Network·No auth·Interaction —·EPSS 0.0334·Published 2015-03-31·Will not fixCWE-20
The parse_SST function in FreeXL before 1.0.0i allows remote attackers to cause a denial of service (memory consumption) via a crafted shared strings table in a workbook.
CVSS 2.0MEDIUM 4.3·Network·No auth·Interaction —·EPSS 0.02358·Published 2015-03-31·Will not fixCWE-20
