Fedora 22 : libreoffice-4.4.7.2-3.fc22 (2016-962c0d156d)

CVE-2016-0794 and CVE-2016-0795 LotusWordPro filter security fixes Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing...

LibreOffice < 5.0.5 Multiple RCE

The version of LibreOffice installed on the remote Windows host is prior to 5.0.5. It is, therefore, affected by multiple vulnerabilities : - A remote code execution vulnerability exists due to improper validation of user-supplied input when handling LotusWordPro LWP documents. A remote attacker...

LibreOffice < 5.0.5 Multiple RCE (Mac OS X)

The version of LibreOffice installed on the remote Mac OS X host is prior to 5.0.5. It is, therefore, affected by multiple vulnerabilities : - A remote code execution vulnerability exists due to improper validation of user-supplied input when handling LotusWordPro LWP documents. A remote attacker...

Debian DSA-3482-1 : libreoffice - security update

An anonymous contributor working with VeriSign iDefense Labs discovered that libreoffice, a full-featured office productivity suite, did not correctly handle Lotus WordPro files. This would enable an attacker to crash the program, or execute arbitrary code, by supplying a specially crafted LWP...

DEBIAN-CVE-2016-0794

The lwp filter in LibreOffice before 5.0.4 allows remote attackers to cause a denial of service memory corruption or possibly have unspecified other impact via a crafted LotusWordPro lwp document...

CVE-2016-0794

CVE-2016-0794 affects LibreOffice with the LotusWordPro (lwp) filter. The vulnerability exists in LibreOffice before 5.0.4, enabling memory corruption/DoS via a crafted LWP document. Connected advisories indicate upstream fixes in LibreOffice 5.0.6.2 (and related updates across RHEL/CentOS/SUSE/M...

CVE-2016-0794

The lwp filter in LibreOffice before 5.0.4 allows remote attackers to cause a denial of service memory corruption or possibly have unspecified other impact via a crafted LotusWordPro lwp document...

[SECURITY] [DSA 3482-1] libreoffice security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3482-1 [email protected] https://www.debian.org/security/ Sebastien Delafond February 17, 2016 https://www.debian.org/security/faq -...

KLA10762 Denial of service vulnerabilities in LibreOffice

Buffer overflow vulnerabilities were found in LibreOffice. By exploiting these vulnerabilities malicious users can cause denial of service. These vulnerabilities can be exploited remotely via a specially designed document. Technical details These vulnerabilities related to parsing the...

CVE-2016-0794

The lwp filter in LibreOffice before 5.0.4 allows remote attackers to cause a denial of service memory corruption or possibly have unspecified other impact via a crafted LotusWordPro lwp document...

UBUNTU-CVE-2016-0794

The lwp filter in LibreOffice before 5.0.4 allows remote attackers to cause a denial of service memory corruption or possibly have unspecified other impact via a crafted LotusWordPro lwp document...

SUSE SLED12 / SLES12 Security Update : dracut (SUSE-SU-2015:2065-1)

The dracut package was updated to fix the following security and non-security issues : - CVE-2015-0794: Use mktemp instead of hard-coded filenames, possible vulnerability bsc935338. - Always install mdraid modules bsc935993. - Add notice when dracut failed to install modules bsc952491. - Always...

SUSE-SU-2015:2065-1 Security update for dracut

The dracut package was updated to fix the following security and non-security issues: - CVE-2015-0794: Use mktemp instead of hardcoded filenames, possible vulnerability bsc935338. - Always install mdraid modules bsc935993. - Add notice when dracut failed to install modules bsc952491. - Always...

CVE-2015-0794

modules.d/90crypt/module-setup.sh in the dracut package before 037-17.30.1 in openSUSE 13.2 allows local users to have unspecified impact via a symlink attack on /tmp/dracutblockuuid.map...

CVE-2015-0794

CVE-2015-0794 affects the dracut package (openSUSE 13.2) prior to 037-17.30.1 via a symlink attack on /tmp/dracut_block_uuid.map in modules.d/90crypt/module-setup.sh. Root cause: use of fixed filenames instead of safe tmp handling; patched in SUSE-SU-2015:2065-1 with mktemp usage. Impact is descr...

openSUSE Security Update : dracut (openSUSE-2015-765)

The dracut package was updated to fix the following security and non security issues : - CVE-2015-0794: Use mktemp instead of hardcoded filenames, possible vulnerability bnc935338. - Always install mdraid modules boo935993. - Add notice when dracut failed to install modules bsc952491. %NASLMINLEV...

Oracle: Security Advisory (ELSA-2015-0794)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Oracle Linux 6 : krb5 (ELSA-2015-0794)

The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2015-0794 advisory. - fix for CVE-2014-5355 1193939 'krb5: unauthenticated denial of service in recvauthcommon and others' - fix for CVE-2014-5353 1174543 'Fix LDAP misuse...

CentOS Update for krb5-devel CESA-2015:0794 centos6

Check the version of krb5-devel SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.882160";...

SQL Injection in JV Comment Joomla Extension

Advisory ID: HTB23195 Product: JV Comment Joomla Extension Vendor: joomlavi.com Vulnerable Versions: 3.0.2 and probably prior Tested Version: 3.0.2 Advisory Publication: January 2, 2014 without technical details Vendor Notification: January 2, 2014 Vendor Patch: January 14, 2014 Public Disclosure...