CVE-2008-0668

Published: Feb 11, 2008Modified: Apr 23, 2026

9.3

Vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Exploitability: 8.6 / Impact: 10.0

Source: NVD

Description

The excel_read_HLINK function in plugins/excel/ms-excel-read.c in Gnome Office Gnumeric before 1.8.1 allows user-assisted remote attackers to execute arbitrary code via a crafted XLS file containing XLS HLINK opcodes, possibly because of an integer signedness error that leads to an integer overflow. NOTE: some of these details are obtained from third party information.

Affected (1)

Products: Gnome: Gnumeric

1 product

Configuration A

1 vulnerable · 2 platform

Vulnerable Software	Affected Versions
Gnome Gnumeric	Up to 1.7.91

Running on/with	Platform Versions
Redhat Fedora	Version 7
Redhat Fedora	Version 8

Related CWEs

References (36)

http://bugs.gentoo.org/show_bug.cgi?id=208356

Source: cve@mitre.org

http://bugzilla.gnome.org/show_bug.cgi?id=505330

Source: cve@mitre.org

http://lists.opensuse.org/opensuse-security-announce/2008-08/msg00001.html

Source: cve@mitre.org

http://secunia.com/advisories/28725/

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/28799

Source: cve@mitre.org

PatchVendor Advisory

http://secunia.com/advisories/28948

Source: cve@mitre.org

http://secunia.com/advisories/29702

Source: cve@mitre.org

http://secunia.com/advisories/29896

Source: cve@mitre.org

http://secunia.com/advisories/31339

Source: cve@mitre.org

http://security.gentoo.org/glsa/glsa-200802-05.xml

Source: cve@mitre.org

http://www.debian.org/security/2008/dsa-1546

Source: cve@mitre.org

http://www.gnome.org/projects/gnumeric/announcements/1.8/gnumeric-1.8.1.shtml

Source: cve@mitre.org

Patch

http://www.mandriva.com/security/advisories?name=MDVSA-2008:056

Source: cve@mitre.org

http://www.securityfocus.com/bid/27536

Source: cve@mitre.org

http://www.ubuntu.com/usn/usn-604-1

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2008/0462

Source: cve@mitre.org

https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00114.html

Source: cve@mitre.org

https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00227.html

Source: cve@mitre.org

http://bugs.gentoo.org/show_bug.cgi?id=208356

Source: af854a3a-2127-422b-91ae-364da2661108

http://bugzilla.gnome.org/show_bug.cgi?id=505330

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.opensuse.org/opensuse-security-announce/2008-08/msg00001.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/28725/

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://secunia.com/advisories/28799

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

http://secunia.com/advisories/28948

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/29702

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/29896

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/31339

Source: af854a3a-2127-422b-91ae-364da2661108

http://security.gentoo.org/glsa/glsa-200802-05.xml

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.debian.org/security/2008/dsa-1546

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.gnome.org/projects/gnumeric/announcements/1.8/gnumeric-1.8.1.shtml

Source: af854a3a-2127-422b-91ae-364da2661108

Patch

http://www.mandriva.com/security/advisories?name=MDVSA-2008:056

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/27536

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.ubuntu.com/usn/usn-604-1

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.vupen.com/english/advisories/2008/0462

Source: af854a3a-2127-422b-91ae-364da2661108

https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00114.html

Source: af854a3a-2127-422b-91ae-364da2661108

https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00227.html

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.