Lucene search
+L

194 matches found

Cvelist
Cvelist
•added 2016/07/08 7:00 p.m.•48 views

CVE-2016-4324

Use-after-free vulnerability in LibreOffice before 5.1.4 allows remote attackers to execute arbitrary code via a crafted RTF file, related to stylesheet and superscript tokens...

7.7AI score0.02819EPSS
SaveExploits1References7
CVE
CVE
•added 2016/07/08 7:00 p.m.•331 views

CVE-2016-4324

CVE-2016-4324 : A use-after-free vulnerability exists in the LibreOffice RTF parser, triggered by parsing crafted RTF files containing a specific combination of stylesheet and superscript tokens. Exploitation could allow arbitrary code execution. Public technical details in connected documents co...

7.8CVSS7.6AI score0.02819EPSS
SaveExploits1References7Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2016/07/08 12:00 a.m.•8 views

CVE-2016-4324: Improper Input Validation

Use-after-free vulnerability in LibreOffice before 5.1.4 allows remote attackers to execute arbitrary code via a crafted RTF file, related to stylesheet and superscript tokens...

7.8CVSS8AI score0.02819EPSS
SaveExploits1References2
UbuntuCve
UbuntuCve
•added 2016/06/29 12:00 a.m.•38 views

CVE-2016-4324

Use-after-free vulnerability in LibreOffice before 5.1.4 allows remote attackers to execute arbitrary code via a crafted RTF file, related to stylesheet and superscript tokens...

7.8CVSS7.4AI score0.02819EPSS
SaveExploits1References4
osv_ubuntu
osv_ubuntu
•added 2016/06/29 12:00 a.m.•12 views

UBUNTU-CVE-2016-4324

Use-after-free vulnerability in LibreOffice before 5.1.4 allows remote attackers to execute arbitrary code via a crafted RTF file, related to stylesheet and superscript tokens...

7.8CVSS7.5AI score0.02819EPSS
SaveExploits1References5
Kaspersky
Kaspersky
•added 2016/06/28 12:00 a.m.•162 views

KLA10837 Code execution vulnerabilities in LibreOffice

Lack of validation was found in LibreOffice. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited remotely via a specially designed RTF file. Original advisories LibreOffice advisory Exploitation Public exploits exist for this...

7.8CVSS8AI score0.02819EPSS
SaveExploits1References3
myhack58
myhack58
•added 2016/01/22 12:00 a.m.•27 views

In-depth analysis of Microsoft Office RTF file stack overflow vulnerability, CVE-2 0 1 6-0 0 1 0-a vulnerability warning-the black bar safety net

0×0 1 Summary In this month's Microsoft patch Tuesday, Microsoft fixes 3 Office vulnerability MS16-0 0 4。 This vulnerability is due to MS Office not correctly parse the RTF document caused by a heap overflow vulnerability successful exploitation of this vulnerability may enable an attacker to...

SaveExploits0
Tenable Nessus
Tenable Nessus
•added 2015/07/14 12:00 a.m.•174 views

MS15-069: Vulnerabilities in Windows Could Allow Remote Code Execution (3072631)

The remote Windows host is affected by multiple remote code execution vulnerabilities : - A remote code execution vulnerability exists due to improper handling of the loading of dynamic link library DLL files. A remote attacker can exploit this vulnerability by placing a specially crafted DLL fil...

6.9CVSS6.6AI score0.09956EPSS
SaveExploits0References3
Check Point Advisories
Check Point Advisories
•added 2015/06/07 12:00 a.m.•6 views

Microsoft Word Intruder RTF FILE

Malicious word documents can be created using Microsoft Word Intruder MWI. This tool can be used in targeted attacks. Successful infection will allow the attacker to download additional malware to the target...

2.7AI score
SaveExploits0
Tenable Nessus
Tenable Nessus
•added 2015/01/19 12:00 a.m.•47 views

LibreOffice < 4.2.8 / 4.3.5 RTF File Handling Code Execution

The version of LibreOffice installed on the remote Windows host is prior to 4.2.7 or 4.3.x prior to 4.3.5. It is, therefore, affected by an invalid memory write vulnerability. An attacker, using a specially crafted Rich Text Format RTF file, can exploit this to cause a denial of service or possib...

7.5CVSS7.1AI score0.04143EPSS
SaveExploits0References2
Mageia
Mageia
•added 2015/01/09 4:44 p.m.•43 views

Updated unrtf package fixes security vulnerability

Updated unrtf package fixes security vulnerability: Hanno Böck also reported a number of other crashes in unrtf besides the ones associated with CVE-2014-9275. These could allow a denial of service when opening a malicious malformed RTF file which causes unrtf to crash...

6.2AI score
SaveExploits0References2
ArchLinux
ArchLinux
•added 2014/12/16 12:00 a.m.•54 views

unrtf: arbitrary code execution

CVE-2014-9274 arbitrary code execution A flaw allows remote attackers to cause a denial of service crash and possibly execute arbitrary code as demonstrated by a file containing the string "\cb-999999999". - CVE-2014-9275 arbitrary code execution A flaw allows remote attackers to cause a denial...

7.5CVSS7.6AI score0.05826EPSS
SaveExploits1References5
NVD
NVD
•added 2014/12/09 11:59 p.m.•21 views

CVE-2014-9275

UnRTF allows remote attackers to cause a denial of service out-of-bounds memory access and crash and possibly execute arbitrary code via a crafted RTF file...

7.5CVSS7.5AI score0.04736EPSS
SaveExploits0References10
osv_cve
osv_cve
•added 2014/12/09 11:59 p.m.•13 views

CVE-2014-9275

UnRTF allows remote attackers to cause a denial of service out-of-bounds memory access and crash and possibly execute arbitrary code via a crafted RTF file...

7.4AI score
SaveExploits0References10
Cvelist
Cvelist
•added 2014/12/09 10:52 p.m.•50 views

CVE-2014-9275

UnRTF allows remote attackers to cause a denial of service out-of-bounds memory access and crash and possibly execute arbitrary code via a crafted RTF file...

7.3AI score0.04736EPSS
SaveExploits0References10
CVE
CVE
•added 2014/12/09 10:52 p.m.•85 views

CVE-2014-9275

UnRTF contains CVEs CVE-2014-9274 and CVE-2014-9275. The issues allow remote attackers to cause denial of service (crash/out-of-bounds access) and potentially execute arbitrary code via crafted RTF files. Affected software is UnRTF (RTF converter); root causes involve memory access/crashes descri...

7.5CVSS7.5AI score0.04736EPSS
SaveExploits0References10Affected Software1
Positive Technologies
Positive Technologies
•added 2014/12/09 12:00 a.m.•2 views

PT-2014-8919

Name of the Vulnerable Software and Affected Versions UnRTF affected versions not specified Description The issue allows remote attackers to cause a denial of service, which includes out-of-bounds memory access and crash, and possibly execute arbitrary code. This can be achieved via a crafted RTF...

7.5CVSS0.04736EPSS
SaveExploits0References26
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2014/12/09 12:00 a.m.•6 views

CVE-2014-9275: Improper Restriction of Operations within the Bounds of a Memory Buffer

UnRTF allows remote attackers to cause a denial of service out-of-bounds memory access and crash and possibly execute arbitrary code via a crafted RTF file...

7.5CVSS6.3AI score0.04736EPSS
SaveExploits0References2
OpenVAS
OpenVAS
•added 2014/11/28 12:00 a.m.•26 views

LibreOffice RTF File Handling Multiple Vulnerabilities (Nov 2014) - Mac OS X

LibreOffice is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:libreoffice:libreoffice";...

7.5CVSS6.4AI score0.04143EPSS
SaveExploits0References2
OpenVAS
OpenVAS
•added 2014/11/28 12:00 a.m.•25 views

LibreOffice RTF File Handling Multiple Vulnerabilities (Nov 2014) - Windows

LibreOffice is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:libreoffice:libreoffice";...

7.5CVSS7.4AI score0.04143EPSS
SaveExploits0References2
Rows per page
Query Builder