S-265: Gnumeric Security Vulnerability

Tags

security, vulnerability

Special Forums Cybersecurity Security Advisories (RSS) S-265: Gnumeric Security Vulnerability

04-17-2008

Registered User

26,240, 27

Join Date: Sep 2000

Last Activity: 1 August 2008, 3:09 PM EDT

Posts: 26,240

Thanks Given: 0

Thanked 27 Times in 26 Posts

S-265: Gnumeric Security Vulnerability

Several integer overflow weaknesses in Gnumeric, a GNOME spreadsheet application, were discovered. These vulnerabilities could result in the execution of arbitrary code through the opening of a maliciously crafted Excel spreadsheet. The risk is MEDIUM. Could result in the execution of arbitrary code.

More...

Linux Bot

View Public Profile for Linux Bot

Find all posts by Linux Bot

Previous Thread | Next Thread

2 More Discussions You Might Find Interesting

1. UNIX for Advanced & Expert Users

GHOST glibc Security Vulnerability

Hello All, Just FYI please about GHOST glibc Security Vulnerability(not sure if this is posted already) which may help us to secure our systems. Following are the 2 links on same too from Redhat side. https://access.redhat.com/articles/1333353...

2. Solaris

Security vulnerability on my sun solaris 9 box

We are running security scans on our machines. I am concerned with my solaris 9 box running on a 280r. got the following message. The remote host accepts loose source routed IP packets. The feature was designed for testing purpose. An attacker may use it to circumvent poorly designed IP...

LEARN ABOUT CENTOS

gsf-vba-dump

GSF(1)								       GNOME								    GSF(1)

NAME

       gsf-vba-dump - extract Visual Basic for Applications macros

SYNOPSIS

       gsf-vba-dump [FILE]...

DESCRIPTION

       This manual page briefly documents the gsf-vba-dump command.

       Various	Microsoft binary data formats, including Excel (.xls), Word (.doc) and PowerPoint (.ppt) can embed macro code streams. These macro
       streams are in P-code (intermediate language) compiled from Visual Basic for Applications (VBA).

       The gsf-vba-dump utility extracts these macro streams.

BUGS

       Macro extraction from Powerpoint (.ppt) files has not been implemented yet.

LICENSE

       gsf-vba-dump is licensed under the terms of version 2.1 of the GNU Lesser General Public License (LGPL) as published by the  Free  Software
       Foundation. For information on this license look at the source code that came with the software or see the GNU project page <http://
       www.gnu.org>.

AUTHORS

       gsf-vba-dump's primary author is Jody Goldberg <jody@gnome.org>.

       The initial version of this manpage was written by J.H.M. Dassen (Ray) <jdassen@debian.org>.

SEE ALSO

       gnumeric(1)

       The Gnumeric homepage <http://www.gnome.org/projects/gnumeric/>.

       The GNOME project page <http://www.gnome.org/>.

       Wikipedia, Visual Basic for Applications <http://en.wikipedia.org/wiki/Visual_Basic_for_Applications>.

gsf								  March 16, 2008							    GSF(1)

Security Advisories (RSS)