Skip to content
Threat Feed
Subscribe

Tag

Excelize

1 brief RSS
medium advisory

Unbounded Decryption SpinCount Denial of Service in Excelize

An unbounded key-derivation loop in the Excelize library allows an attacker to trigger CPU exhaustion via a maliciously crafted EncryptionInfo stream in an OLE-formatted file.

excelize +6 denial-of-service vulnerability Go golang
2t 1c updated