Vulnerability Spotlight: TALOS-2017-0430/0431: Multiple Vulnerabilities in FreeXL Library
Cisco Talos disclosed TALOS-2017-0431 / CVE-2017-2924, a heap-based buffer overflow in the read_legacy_biff function of the FreeXL library that occurs when it parses a DIMENSION record filled with data from a malicious XLS file in BIFF format. An attacker...