CVE-2015-2776: The parse_SST function in FreeXL before 1.0.0i allows remote attackers to cause a denial of service (memory...

Security readout for executives and security teams

CVE-2015-2776 is a denial-of-service issue in FreeXL before 1.0.0i. A malicious workbook can make the parser consume excessive memory while reading shared strings. Business impact depends on whether FreeXL processes untrusted spreadsheet files in user-facing or automated workflows. Exposure is most likely where FreeXL before 1.0.0i is installed or bundled into systems that parse externally supplied workbook files. Desktop-only use is lower urgency than server-side ingestion, batch conversion, GIS import, or upload pipelines that process untrusted spreadsheets. Prioritize remediation for systems that automatically process third-party spreadsheets, because this can turn a single malicious file into service instability. For isolated desktops or trusted-only workflows, handle through normal patch management unless business-critical processing depends on FreeXL. Mitigation focus: Upgrade FreeXL to 1.0.0i or a vendor-fixed package.; Apply Debian or Gentoo security updates where those distributions manage FreeXL.; Inventory applications that bundle FreeXL rather than using system packages..

Prepared

Jun 14, 2026, 05:11 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.