CVE-2023-38852
MediumCVSS 6.5Exploitation Probability (EPSS)
Elevated risk63th percentile - higher than 63% of all known CVEs
Summary
Buffer Overflow vulnerability in libxls version 1.6.2 allows a remote attacker to execute arbitrary code and cause a denial of service via a crafted XLS file to the unicode_decode_wcstombs function in xlstool.c:266.
Risk Assessment
An attacker can exploit this vulnerability to remotely execute code, potentially leading to serious security and service availability issues.
Recommendation
It is recommended to update libxls to the latest version to mitigate this vulnerability and to monitor systems for suspicious XLS files.
Original NVD description (English source)
Buffer Overflow vulnerability in libxlsv.1.6.2 allows a remote attacker to execute arbitrary code and cause a denial of service via a crafted XLS file to the unicode_decode_wcstombs function in xlstool.c:266.