CVE-2018-10119

2018-04-1609:58:10

Google

osv.dev

0.016 Low

EPSS

Percentile

87.6%

JSON

sot/source/sdstor/stgstrms.cxx in LibreOffice before 5.4.5.1 and 6.x before 6.0.1.1 uses an incorrect integer data type in the StgSmallStrm class, which allows remote attackers to cause a denial of service (use-after-free with write access) or possibly have unspecified other impact via a crafted document that uses the structured storage ole2 wrapper file format.

CPENameOperatorVersion
coreeqlibreoffice-5-2-branch-point
coreeqlibreoffice-5-1-branch-point
coreeqlibreoffice-3.5.0.0
coreeqlibreoffice-4-3-branch-point
coreeqlibreoffice-6-0-branch-point
coreeqgpg4libre-review-5.4.99
coreeqlibreoffice-4-4-branch-point
coreeqlibreoffice-4-0-branch-point
coreeqlibreoffice-4-1-branch-point
coreeqlibreoffice-5-4-branch-point

Name	Operator	Version
core	eq	libreoffice-5-2-branch-point
core	eq	libreoffice-5-1-branch-point
core	eq	libreoffice-3.5.0.0
core	eq	libreoffice-4-3-branch-point
core	eq	libreoffice-6-0-branch-point
core	eq	gpg4libre-review-5.4.99
core	eq	libreoffice-4-4-branch-point
core	eq	libreoffice-4-0-branch-point
core	eq	libreoffice-4-1-branch-point
core	eq	libreoffice-5-4-branch-point