Lucene search

GoogleOSV:CVE-2017-7882

HistoryApr 15, 2017 - 4:59 p.m.

CVE-2017-7882

2017-04-1516:59:00

Google

osv.dev

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

6.8 Medium

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.006 Low

EPSS

Percentile

77.4%

JSON

LibreOffice before 2017-03-14 has an out-of-bounds write related to the HWPFile::TagsRead function in hwpfilter/source/hwpfile.cxx.

CPENameOperatorVersion
coreeqlibreoffice-5-2-branch-point
coreeqlibreoffice-5-1-branch-point
coreeqlibreoffice-3.5.0.0
coreeqlibreoffice-4-3-branch-point
coreeqlibreoffice-4-4-branch-point
coreeqlibreoffice-4-0-branch-point
coreeqlibreoffice-4-1-branch-point
coreeqlibreoffice-3-6-branch-point
coreeqlibreoffice-4-2-milestone-1
coreeqlibreoffice-4-2-branch-point

Name	Operator	Version
core	eq	libreoffice-5-2-branch-point
core	eq	libreoffice-5-1-branch-point
core	eq	libreoffice-3.5.0.0
core	eq	libreoffice-4-3-branch-point
core	eq	libreoffice-4-4-branch-point
core	eq	libreoffice-4-0-branch-point
core	eq	libreoffice-4-1-branch-point
core	eq	libreoffice-3-6-branch-point
core	eq	libreoffice-4-2-milestone-1
core	eq	libreoffice-4-2-branch-point

Rows per page:

1-10 of 201

References

www.libreoffice.org/about-us/security/advisories/cve-2017-7882/

www.securityfocus.com/bid/97684

bugs.chromium.org/p/oss-fuzz/issues/detail?id=860

github.com/LibreOffice/core/commit/65dcd1d8195069c8c8acb3a188b8e5616c51029c

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

6.8 Medium

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.006 Low

EPSS

Percentile

77.4%

JSON

Related for OSV:CVE-2017-7882