CVE-2018-0795

Microsoft Office 2010, Microsoft Office 2013, and Microsoft Office 2016 allow a remote code execution vulnerability due to the way objects are handled in memory, aka "Microsoft Office Remote Code Execution Vulnerability"...

CVE-2018-0795

CVE-2018-0795 affects Office 2010/2013/2016; memory handling of in-memory objects enables remote code execution. Root cause: memory corruption in Office components when processing crafted files, per multiple sources. Impact: remote code execution with the attacker gaining the privileges of the cu...

CVE-2018-0795

Microsoft Office 2010, Microsoft Office 2013, and Microsoft Office 2016 allow a remote code execution vulnerability due to the way objects are handled in memory, aka "Microsoft Office Remote Code Execution Vulnerability"...

Microsoft Office CVE-2018-0795 Remote Code Execution Vulnerability

Description Microsoft Office is prone to a remote code-execution vulnerability. An attacker can leverage this issue to execute arbitrary code in the context of the currently logged-in user. Failed exploit attempts will likely result in denial of service conditions. Technologies Affected Microsoft...

CVE-2017-0795

CVE-2017-0795 is a privilege-escalation vulnerability in the MediaTek accessory detector driver within the Android kernel. The issue is categorized as an EoP with high impact locally (no user interaction required in some contexts, per CVSS data). Affected component: MediaTek accessory detector dr...

CentOS 7 : libcmis / libpagemaker / libreoffice / mdds (CESA-2016:2579)

An update for libreoffice is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability fro...

RHEL 7 : libreoffice (RHSA-2016:2579)

An update for libreoffice is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability fro...

SUSE SLED12 Security Update : LibreOffice (SUSE-SU-2016:1728-1)

LibreOffice was updated to version 5.1.3.2, bringing many new features and bug fixes. Two security issues have been fixed : - CVE-2016-0795: LibreOffice allowed remote attackers to cause a denial of service memory corruption or possibly have unspecified other impact via a crafted LwpTocSuperLayou...

openSUSE Security Update : LibreOffice (openSUSE-2016-871)

LibreOffice was updated to version 5.1.3.2, bringing many new features and bug fixes. Two security issues have been fixed : - CVE-2016-0795: LibreOffice allowed remote attackers to cause a denial of service memory corruption or possibly have unspecified other impact via a crafted LwpTocSuperLayou...

SUSE-SU-2016:1728-1 Security update for LibreOffice

LibreOffice was updated to version 5.1.3.2, bringing many new features and bug fixes. Two security issues have been fixed: - CVE-2016-0795: LibreOffice allowed remote attackers to cause a denial of service memory corruption or possibly have unspecified other impact via a crafted LwpTocSuperLayout...

openSUSE Security Update : libreoffice (openSUSE-2016-642)

This libreoffice update to version 5.0.6.3 fixes the following issues : Security issues fixed : - CVE-2016-0794: multiple lwp issues boo967014 - CVE-2016-0795: multiple lwp issues boo967015 Bugs fixed : - Version update to 5.0.6.3 : - 5.0.6 release, various bugfixes on the 5.0 series, this is las...

Fedora 22 : libreoffice-4.4.7.2-3.fc22 (2016-962c0d156d)

CVE-2016-0794 and CVE-2016-0795 LotusWordPro filter security fixes Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing...

LibreOffice < 5.0.5 Multiple RCE (Mac OS X)

The version of LibreOffice installed on the remote Mac OS X host is prior to 5.0.5. It is, therefore, affected by multiple vulnerabilities : - A remote code execution vulnerability exists due to improper validation of user-supplied input when handling LotusWordPro LWP documents. A remote attacker...

LibreOffice < 5.0.5 Multiple RCE

The version of LibreOffice installed on the remote Windows host is prior to 5.0.5. It is, therefore, affected by multiple vulnerabilities : - A remote code execution vulnerability exists due to improper validation of user-supplied input when handling LotusWordPro LWP documents. A remote attacker...

Debian DSA-3482-1 : libreoffice - security update

An anonymous contributor working with VeriSign iDefense Labs discovered that libreoffice, a full-featured office productivity suite, did not correctly handle Lotus WordPro files. This would enable an attacker to crash the program, or execute arbitrary code, by supplying a specially crafted LWP...

CVE-2016-0795

CVE-2016-0795 affects LibreOffice before 5.0.5 due to a flaw in the Lotus Word Pro (LWP) document parsing, allowing remote memory corruption via a crafted LwpTocSuperLayout record in a LotusWordPro (lwp) document. Exploitation is possible when a user opens a poisoned file, with CVSS indicating HI...

[SECURITY] [DSA 3482-1] libreoffice security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3482-1 [email protected] https://www.debian.org/security/ Sebastien Delafond February 17, 2016 https://www.debian.org/security/faq -...

KLA10762 Denial of service vulnerabilities in LibreOffice

Buffer overflow vulnerabilities were found in LibreOffice. By exploiting these vulnerabilities malicious users can cause denial of service. These vulnerabilities can be exploited remotely via a specially designed document. Technical details These vulnerabilities related to parsing the...

NetIQ Security Solutions for ISeries SafeShellExecute Stack Buffer Overflow (CVE-2015-0795)

A vulnerability has been reported in NetIQ Security Solutions for ISeries. The vulnerability is due to a stack buffer overflow in the NetIQExecObject.NetIQExec ActiveX Control when processing parameters to the SafeShellExecute function. A remote attacker can exploit this vulnerability by enticing...

CVE-2015-0795

CVE-2015-0795 affects NetIQ Security Solutions for ISeries. The NetIQExecObject.NetIQExec.1 ActiveX Control’s SafeShellExecute method in NetIQExec.dll contains a stack-based buffer overflow when processing long parameters, enabling remote code execution in affected installations of version 8.1. T...