Debian/freexl: unknown
The parse_SST function in FreeXL before 1.0.0i allows remote attackers to cause a denial of service (memory consumption) via a crafted shared strings table in a workbook.
Action: Upgrade freexl to 1.0.0g-1+deb8u1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.0.0g-1+deb8u1 | - |
Fixed versions
| 1.0.0g-1+deb8u1 |
Sources
- osv: DEBIAN-CVE-2015-2776#Debian:14/freexl
- https://security-tracker.debian.org/tracker/CVE-2015-2776
published · modified · JSON