[SECURITY] [DSA 4022-1] libreoffice security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4022-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff November 07, 2017 https://www.debian.org/security/faq -...

CVE-2013-2189

Apache OpenOffice.org OOo before 4.0 allows remote attackers to cause a denial of service memory corruption or possibly have unspecified other impact via invalid PLCF data in a DOC document file...

CVE-2013-2189

Apache OpenOffice.org OOo before 4.0 allows remote attackers to cause a denial of service memory corruption or possibly have unspecified other impact via invalid PLCF data in a DOC document file...

Memory corruption

Apache OpenOffice.org OOo before 4.0 allows remote attackers to cause a denial of service memory corruption or possibly have unspecified other impact via invalid PLCF data in a DOC document file...

CVE-2013-2189

Apache OpenOffice.org OOo before 4.0 allows remote attackers to cause a denial of service memory corruption or possibly have unspecified other impact via invalid PLCF data in a DOC document file...

CVE-2013-2189

Apache OpenOffice.org OOo before 4.0 allows remote attackers to cause a denial of service memory corruption or possibly have unspecified other impact via invalid PLCF data in a DOC document file...

CVE-2013-2189

Apache OpenOffice.org/OpenOffice (OOo) versions prior to 4.0 are affected by CVE-2013-2189. The vulnerability arises from processing PLCF data in DOC files, leading to memory corruption and a potential denial of service (and possibly unspecified impact). Remediation is to upgrade to OpenOffice 4....

IBM Lotus Symphony Multiple Vulnerabilities (Windows)

This host is installed with IBM Lotus Symphony and is prone to multiple unspecified vulnerabilities. OpenVAS Vulnerability Test $Id: gbibmlotussymphonymultvulnwin.nasl 7024 2017-08-30 11:51:43Z teissa $ IBM Lotus Symphony Multiple Vulnerabilities Windows Authors: Sooraj KS Copyright: Copyright c...

Code injection

IBM Lotus Symphony 3 before FP3 allows remote attackers to cause a denial of service application crash via the sample .doc document that incorporates a user-defined toolbar...

CVE-2005-0941

The StgCompObjStream::Load function in OpenOffice.org OpenOffice 1.1.4 and earlier allocates memory based on 16 bit length values, but process memory using 32 bit values, which allows remote attackers to cause a denial of service and possibly execute arbitrary code via a DOC document with certain...

CVE-2005-0941

The StgCompObjStream::Load function in OpenOffice.org OpenOffice 1.1.4 and earlier allocates memory based on 16 bit length values, but process memory using 32 bit values, which allows remote attackers to cause a denial of service and possibly execute arbitrary code via a DOC document with certain...

GLSA-200504-13 : OpenOffice.Org: DOC document Heap Overflow

The remote host is affected by the vulnerability described in GLSA-200504-13 OpenOffice.Org: DOC document Heap Overflow AD-LAB has discovered a heap overflow in the 'StgCompObjStream::Load' function when processing DOC documents. Impact : An attacker could design a malicious DOC document containi...

openoffice -- DOC document heap overflow vulnerability

AD-LAB reports that a heap-based buffer overflow vulnerability exists in OpenOffice's handling of DOC documents. When reading a DOC document 16 bit from a 32 bit integer is used for memory allocation, but the full 32 bit is used for further processing of the document. This can allow an attacker t...