242 matches found
DEBIAN-CVE-2020-23266
An issue was discovered in gpac 0.8.0. The ODReadUTF8String function in odfcode.c has a heap-based buffer overflow which can lead to a denial of service DOS via a crafted media file...
GPAC 缓冲区错误漏洞
GPAC is a multimedia framework for rich media and is distributed under the LGPL license. a heap buffer overflow vulnerability exists in the ODReadUTF8String function in odfcode.c in GPAC version 0.8.0. An attacker could exploit the vulnerability to cause a denial of service via specially crafted...
UBUNTU-CVE-2021-32271
An issue was discovered in gpac through 20200801. A stack-buffer-overflow exists in the function DumpRawUIConfig located in odfdump.c. It allows an attacker to cause code Execution...
GPAC 缓冲区错误漏洞
GPAC is a multimedia framework for rich media and is distributed under the LGPL license. a stack buffer overflow vulnerability exists in the DumpRawUIConfig function in odfdump.c in GPAC 20200801 and earlier versions. An attacker could exploit this vulnerability to execute code...
DEBIAN-CVE-2020-19751
An issue was discovered in gpac 0.8.0. The gfodfdelipmptool function in odfcode.c has a heap-based buffer over-read...
UBUNTU-CVE-2020-19751
An issue was discovered in gpac 0.8.0. The gfodfdelipmptool function in odfcode.c has a heap-based buffer over-read...
GPAC 缓冲区错误漏洞
GPAC is a multimedia framework for rich media and distributed under the LGPL license. gfodfdelipmptool function in odfcode.c in GPAC version 0.8.0 is vulnerable to a heap buffer overflow. No detailed vulnerability details are currently available...
Description of the security update for Office Online Server: March 9, 2021 (KB4493229)
None None...
Oracle Linux 8 : libreoffice (ELSA-2020-4628)
The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2020-4628 advisory. libcmis 0.5.2-1 - Related: rhbz1796893 update to 0.5.2 liborcus 0.14.1-1 - Related: rhbz1796893 update to 0.14.1 libreoffice 6.3.6.2-3.0.1 - Replace...
BigBlueButton Server-Side Request Forgery Vulnerability
BigBlueButton is BigBlueButton community of a set of open source Web conferencing system . A server-side request forgery vulnerability exists in versions prior to BigBlueButton 2.2.7 that allows an attacker to read a local file and perform an SSRF attack via an uploaded Office document with a...
CVE-2020-25820
BigBlueButton before 2.2.7 allows remote authenticated users to read local files and conduct SSRF attacks via an uploaded Office document that has a crafted URL in an ODF xlink field...
CVE-2020-25820
BigBlueButton before 2.2.7 allows remote authenticated users to read local files and conduct SSRF attacks via an uploaded Office document that has a crafted URL in an ODF xlink field...
Server side request forgery (ssrf)
BigBlueButton before 2.2.7 allows remote authenticated users to read local files and conduct SSRF attacks via an uploaded Office document that has a crafted URL in an ODF xlink field...
CVE-2020-25820
BigBlueButton before 2.2.7 allows remote authenticated users to read local files and conduct SSRF attacks via an uploaded Office document that has a crafted URL in an ODF xlink field...
CVE-2020-25820: Server-Side Request Forgery (SSRF)
BigBlueButton before 2.2.7 allows remote authenticated users to read local files and conduct SSRF attacks via an uploaded Office document that has a crafted URL in an ODF xlink field...
BigBlueButton 2.2.25 File Disclosure / Server-Side Request Forgery
Advisory: Arbitrary File Disclosure and Server-Side Request Forgery in BigBlueButton RedTeam Pentesting discovered a vulnerability in the BigBlueButton web conferencing system which allows participants of a conference with permissions to upload presentations to read arbitrary files from the file...
Libre Office Multiple Vulnerabilities (Jun 2020) - Linux
Libre Office is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:libreoffice:libreoffice";...
Libre Office Multiple Vulnerabilities (Jun 2020) - Mac OS X
Libre Office is prone to multiple vulnerabilities. Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
CVE-2020-12803
ODF documents can contain forms to be filled out by the user. Similar to HTML forms, the contained form data can be submitted to a URI, for example, to an external web server. To create submittable forms, ODF implements the XForms W3C standard, which allows data to be submitted without the need f...
CVE-2020-12803
ODF documents can contain forms to be filled out by the user. Similar to HTML forms, the contained form data can be submitted to a URI, for example, to an external web server. To create submittable forms, ODF implements the XForms W3C standard, which allows data to be submitted without the need f...