Huawei EulerOS: Security Advisory for libreoffice (EulerOS-SA-2020-2551)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

LibreOffice < 5.4.6 and < 6.0.2 Heap Buffer Overflow

The LibreOffice installed on the remote host is either 5.x prior to 5.4.6 or 6.x prior to 6.0.2. A heap-based buffer overflow condition exists in The SwCTBWrapper::Read function due to improperly checking the bounds of the index into the dynamically allocated buffer. An unauthenticated, remote...

The vulnerability of the SwCTBWrapper function:: Read in the LibreOffice office software package allows a hacker to execute arbitrary code or cause a service failure.

The vulnerability of the SwCTBWrapper function in the LibreOffice office software package’s installer is related to the use of memory after it is freed. Exploiting this vulnerability could allow a malicious actor to cause service interruptions using a specially crafted file...

The vulnerability of the SwCTBWrapper function:: Read in the LibreOffice office software package allows a hacker to execute arbitrary code or cause a service failure.

The vulnerability of the SwCTBWrapper function in the LibreOffice office software package’s installer is related to buffer overflow attacks. Exploiting this vulnerability can allow an attacker, operating remotely, to cause service interruptions using a specially crafted file...

CVE-2018-10120

The SwCTBWrapper::Read function in sw/source/filter/ww8/ww8toolbar.cxx in LibreOffice before 5.4.6.1 and 6.x before 6.0.2.1 does not validate a customizations index, which allows remote attackers to cause a denial of service heap-based buffer overflow with write access or possibly have unspecifie...

CVE-2018-10120

The SwCTBWrapper::Read function in sw/source/filter/ww8/ww8toolbar.cxx in LibreOffice before 5.4.6.1 and 6.x before 6.0.2.1 does not validate a customizations index, which allows remote attackers to cause a denial of service heap-based buffer overflow with write access or possibly have unspecifie...

CVE-2018-10120

The SwCTBWrapper::Read function in sw/source/filter/ww8/ww8toolbar.cxx in LibreOffice before 5.4.6.1 and 6.x before 6.0.2.1 does not validate a customizations index, which allows remote attackers to cause a denial of service heap-based buffer overflow with write access or possibly have unspecifie...

Heap overflow

The SwCTBWrapper::Read function in sw/source/filter/ww8/ww8toolbar.cxx in LibreOffice before 5.4.6.1 and 6.x before 6.0.2.1 does not validate a customizations index, which allows remote attackers to cause a denial of service heap-based buffer overflow with write access or possibly have unspecifie...

LibreOffice Denial of Service Vulnerability (CNVD-2018-09031)

LibreOffice is a free and open source office software suite developed by The Document Foundation TDF. The suite consists of Writer text documents, Calc spreadsheets and Impress presentations and other applications. A security vulnerability exists in the 'SwCTBWrapper::Read' function in the...

UBUNTU-CVE-2018-10120

The SwCTBWrapper::Read function in sw/source/filter/ww8/ww8toolbar.cxx in LibreOffice before 5.4.6.1 and 6.x before 6.0.2.1 does not validate a customizations index, which allows remote attackers to cause a denial of service heap-based buffer overflow with write access or possibly have unspecifie...

CVE-2018-10120

The SwCTBWrapper::Read function in sw/source/filter/ww8/ww8toolbar.cxx in LibreOffice before 5.4.6.1 and 6.x before 6.0.2.1 does not validate a customizations index, which allows remote attackers to cause a denial of service heap-based buffer overflow with write access or possibly have unspecifie...

CVE-2018-10120

The SwCTBWrapper::Read function in sw/source/filter/ww8/ww8toolbar.cxx in LibreOffice before 5.4.6.1 and 6.x before 6.0.2.1 does not validate a customizations index, which allows remote attackers to cause a denial of service heap-based buffer overflow with write access or possibly have unspecifie...

CVE-2018-10120

CVE-2018-10120 affects LibreOffice: SwCTBWrapper::Read in sw/source/filter/ww8/ww8toolbar.cxx does not validate a customizations index, enabling a heap-based buffer overflow when opening crafted Word records. Affected versions are LibreOffice before 5.4.6.1 and 6.x before 6.0.2.1. Impact per desc...

libreoffice/ww8fuzzer: Heap-buffer-overflow in SwCTBWrapper::Read

Project: git://anongit.freedesktop.org/libreoffice/core Detailed report: https://oss-fuzz.com/testcase?key=5434612567244800 Project: libreoffice Fuzzer: libFuzzerlibreofficeww8fuzzer Fuzz target binary: ww8fuzzer Job Type: libfuzzerasanlibreoffice Platform Id: linux Crash Type: Heap-buffer-overfl...