CVE-2017-2910

An exploitable Out-of-bounds Write vulnerability exists in the xls_addCell function of libxls 2.0. A specially crafted xls file can cause a memory corruption resulting in remote code execution. An attacker can send malicious xls file to trigger this vulnerability.

• CWE-787

• https://talosintelligence.com/vulnerability_reports/TALOS-2017-0417Exploit, Third Party Advisory
• https://talosintelligence.com/vulnerability_reports/TALOS-2017-0417Exploit, Third Party Advisory

Published

Dec 2, 2020

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-2904An exploitable integer overflow exists in the RADIANCE loadi…7.8
• CVE-2017-2905An exploitable integer overflow exists in the bmp loading fu…7.8
• CVE-2017-2906An exploitable integer overflow exists in the animation play…7.8
• CVE-2017-2907An exploitable integer overflow exists in the animation play…7.8
• CVE-2017-2908An exploitable integer overflow exists in the thumbnail func…7.8
• CVE-2017-2909An infinite loop programming error exists in the DNS server …7.5
• CVE-2017-2911An exploitable vulnerability exists in the remote control fu…5.9
• CVE-2017-2912An exploitable vulnerability exists in the remote control fu…5.9
• CVE-2017-2913An exploitable vulnerability exists in the filtering functio…5.9
• CVE-2017-2914An exploitable authentication bypass vulnerability exists in…8.1
• CVE-2017-2915An exploitable vulnerability exists in the WiFi configuratio…8
• CVE-2017-2916An exploitable vulnerability exists in the /api/CONFIG/resto…8.8