Gnumeric XLS HLINK Opcode Handling Remote Arbitrary Code Execution Vulnerability
BID:27536
Info
Gnumeric XLS HLINK Opcode Handling Remote Arbitrary Code Execution Vulnerability
| Bugtraq ID: | 27536 |
| Class: | Boundary Condition Error |
| CVE: |
CVE-2008-0668 |
| Remote: | Yes |
| Local: | No |
| Published: | Jan 31 2008 12:00AM |
| Updated: | Apr 13 2015 10:23PM |
| Credit: | The vendor and Secunia Research disclosed this issue. |
| Vulnerable: |
Ubuntu Ubuntu Linux 7.10 sparc Ubuntu Ubuntu Linux 7.10 powerpc Ubuntu Ubuntu Linux 7.10 i386 Ubuntu Ubuntu Linux 7.10 amd64 Ubuntu Ubuntu Linux 7.04 sparc Ubuntu Ubuntu Linux 7.04 powerpc Ubuntu Ubuntu Linux 7.04 i386 Ubuntu Ubuntu Linux 7.04 amd64 Ubuntu Ubuntu Linux 6.10 sparc Ubuntu Ubuntu Linux 6.10 powerpc Ubuntu Ubuntu Linux 6.10 i386 Ubuntu Ubuntu Linux 6.10 amd64 Ubuntu Ubuntu Linux 6.06 LTS sparc Ubuntu Ubuntu Linux 6.06 LTS powerpc Ubuntu Ubuntu Linux 6.06 LTS i386 Ubuntu Ubuntu Linux 6.06 LTS amd64 S.u.S.E. openSUSE 10.3 S.u.S.E. openSUSE 10.2 Redhat Fedora 7 Mandriva Linux Mandrake 2008.0 x86_64 Mandriva Linux Mandrake 2008.0 Mandriva Linux Mandrake 2007.1 x86_64 Mandriva Linux Mandrake 2007.1 GNU Gnumeric 1.6.3 Gentoo Linux |
| Not Vulnerable: |
GNU Gnumeric 1.8.1 |
Discussion
Gnumeric XLS HLINK Opcode Handling Remote Arbitrary Code Execution Vulnerability
Gnumeric is prone to a vulnerability that lets remote attakers execute arbitrary code.
Attackers may exploit this issue to corrupt memory and execute machine code in the context of the affected application. Failed exploit attempts will result in denial-of-service conditions.
The issue affects Gnumeric 1.6.3; other versions may also be vulnerable.
Gnumeric is prone to a vulnerability that lets remote attakers execute arbitrary code.
Attackers may exploit this issue to corrupt memory and execute machine code in the context of the affected application. Failed exploit attempts will result in denial-of-service conditions.
The issue affects Gnumeric 1.6.3; other versions may also be vulnerable.
Exploit / POC
Gnumeric XLS HLINK Opcode Handling Remote Arbitrary Code Execution Vulnerability
Currently we are not aware of any exploits for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Currently we are not aware of any exploits for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution / Fix
Gnumeric XLS HLINK Opcode Handling Remote Arbitrary Code Execution Vulnerability
Solution:
The vendor has released fixes. Please see the referenced advisory for more information.
Solution:
The vendor has released fixes. Please see the referenced advisory for more information.
References
Gnumeric XLS HLINK Opcode Handling Remote Arbitrary Code Execution Vulnerability
References:
References:
- Bug 505330 �?? Gnumeric crashes on opening Excel 97 file (Gnumeric)
- Gnumeric 1.8.1 aka TBD is now available. (Gnumeric)
- Welcome to Gnumeric! (Gnumeric)