medium5.5
CVE-2020-27819
An issue was discovered in libxls before and including 1.6.1 when reading Microsoft Excel files.
Impact
An issue was discovered in libxls before and including 1.6.1 when reading Microsoft Excel files. A NULL pointer dereference vulnerability exists when parsing XLS cells in libxls/xls2csv.c:199. It could allow a remote attacker to cause a denial of service via crafted XLS file.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Libxls Project | Libxls | before 1.6.2 |