high8.4
CVE-2024-48877
A memory corruption vulnerability exists in the Shared String Table Record Parser implementation in xls2csv utility version 0.95.
Impact
A memory corruption vulnerability exists in the Shared String Table Record Parser implementation in xls2csv utility version 0.95. A specially crafted malformed file can lead to a heap buffer overflow. An attacker can provide a malicious file to trigger this vulnerability.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Wagner | Xls2csv | Version 0.95 |