Bug 1044857 (CVE-2013-6836) - CVE-2013-6836 gnumeric: heap-based buffer overflow in ms_escher_get_data function
Summary: CVE-2013-6836 gnumeric: heap-based buffer overflow in ms_escher_get_data func...
Keywords:
Status: CLOSED ERRATA
Alias: CVE-2013-6836
Product: Security Response
Classification: Other
Component: vulnerability
Version: unspecified
Hardware: All
OS: Linux
low
low
Target Milestone: ---
Assignee: Red Hat Product Security
QA Contact:
URL:
Whiteboard:
Depends On: 1044858 1044859
Blocks:
TreeView+ depends on / blocked
 
Reported: 2013-12-19 06:30 UTC by Ratul Gupta
Modified: 2019-09-29 13:11 UTC (History)
2 users (show)

Fixed In Version: gnumeric 1.12.9
Doc Type: Bug Fix
Doc Text:
Clone Of:
Environment:
Last Closed: 2015-08-22 15:45:38 UTC
Embargoed:

Attachments (Terms of Use)

Description Ratul Gupta 2013-12-19 06:30:55 UTC 
Common Vulnerabilities and Exposures assigned an identifier CVE-2013-6836 to the following vulnerability:

Name: CVE-2013-6836
URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6836
Assigned: 20131120
Reference: https://bugzilla.gnome.org/show_bug.cgi?id=712772
Reference: https://git.gnome.org/browse/gnumeric/commit/?id=b5480b69345b3c6d56ee0ed9c9e9880bb2a08cdc
Reference: https://projects.gnome.org/gnumeric/announcements/1.12/gnumeric-1.12.9.shtml

Heap-based buffer overflow in the ms_escher_get_data function in plugins/excel/ms-escher.c in GNOME Office Gnumeric before 1.12.9 allows remote attackers to cause a denial of service (crash) via a crafted xls file with a crafted length value.
Comment 1 Ratul Gupta 2013-12-19 06:32:08 UTC 
Created gnumeric tracking bugs for this issue:

Affects: fedora-all [bug 1044858]
Affects: epel-all [bug 1044859]
Note You need to log in before you can comment on or make changes to this bug.