CVE-2017-2924: Debian Linux

High severity, CVSS 8.8. EPSS: 3.2% chance of exploitation in the next 30 days.

An exploitable heap-based buffer overflow vulnerability exists in the read_legacy_biff function of FreeXL 1.0.3. A specially crafted XLS file can cause a memory corruption resulting in remote code execution. An attacker can send malicious XLS file to trigger this vulnerability.

Affected products

• Debian Debian Linux: version 8.0 only; version 9.0 only
• Freexl Project Freexl: version 1.0.3 only

Published 2018-04-24. Last modified 2026-06-17.