Heap-based buffer overflow in the ms_escher_get_data function in plugins/excel/ms-escher.c in GNOME Office Gnumeric before 1.12.9 allows remote attackers to cause a denial of service (crash) via a crafted xls file with a crafted length value.

- Add gnumeric-CVE-2013-6836.patch: fix     Heap-buffer-overflow in ms_escher_get_data on a fuzzed     xls file (bnc#856254, bgo#712772, CVE-2013-6838).

This is an update to the latest upstream releases of gnumeric, goffice and gnome-chemistry-utils :

  -     https://projects.gnome.org/gnumeric/announcements/1.12/g     numeric-1.12.9.shtml

    -       http://svn.savannah.nongnu.org/viewvc/*checkout*/branc       hes/gchemutils-0.14/gchemutils/NEWS?revision=1856&root       =gchemutils

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	Name	Product	Family	Severity
75408	openSUSE Security Update : gnumeric (openSUSE-SU-2014:0138-1)	Nessus	SuSE Local Security Checks	critical
71914	Fedora 20 : gnome-chemistry-utils-0.14.5-1.fc20 / gnumeric-1.12.9-1.fc20 / goffice-0.10.9-1.fc20 (2014-0033)	Nessus	Fedora Local Security Checks	medium
71913	Fedora 18 : gnome-chemistry-utils-0.14.5-1.fc18 / gnumeric-1.12.9-1.fc18 / goffice-0.10.9-1.fc18 (2014-0025)	Nessus	Fedora Local Security Checks	medium
71912	Fedora 19 : gnome-chemistry-utils-0.14.5-1.fc19 / gnumeric-1.12.9-1.fc19 / goffice-0.10.9-1.fc19 (2014-0020)	Nessus	Fedora Local Security Checks	medium

Detections

Analytics

CVE-2013-6836

medium

Tenable Plugins

critical

medium

medium

medium