NVD

Id
41715  
Name
CVE-2013-6836  
Description
Heap-based buffer overflow in the ms_escher_get_data function in plugins/excel/ms-escher.c in GNOME Office Gnumeric before 1.12.9 allows remote attackers to cause a denial of service (crash) via a crafted xls file with a crafted length value.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:N/A:P)  
Pub Date
2017-01-18  
Published
2013-12-18  
Modified Date
2016-12-30  
Seq
2013-6836  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
210864 41715 CVE-2013-6836 openSUSE-SU-2014:0201  View
210865 41715 CVE-2013-6836 64459  View
210866 41715 CVE-2013-6836 https://bugzilla.gnome.org/show_bug.cgi?id=712772  View
210867 41715 CVE-2013-6836 https://git.gnome.org/browse/gnumeric/commit/?id=b5480b69345b3c6d56ee0ed9c9e9880bb2a08cdc  View
210868 41715 CVE-2013-6836 https://projects.gnome.org/gnumeric/announcements/1.12/gnumeric-1.12.9.shtml  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
24051 JVNDB-2013-005626 GNOME Office Gnumeric の plugins/excel/ms-escher.c におけるヒープベースのバッファオーバーフローの脆弱性 GNOME Office Gnumeric の plugins/excel/ms-escher.c の ms_escher_get_data 関数には、ヒープベースのバッファオーバーフローの脆弱性が存在します。 CVE-2013-6836 66778 CVE-2013-6836 41715 4.3 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-005626.html 2013-11-20 2013-12-20 View