openSUSE Security Update : LibreOffice (openSUSE-SU-2014:1126-1)

This update fixes memory corruption vulnerability in DOCM import and data exposure using crafted OLE objects. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update openSUSE-2014-540. The text...

SuSE 11.3 Security Update : LibreOffice (SAT Patch Number 9677)

LibreOffice was updated to version 4.0.3.3.26. SUSE 4.0-patch26, tag suse-4.0-26, based on upstream 4.0.3.3. Two security issues have been fixed : - DOCM memory corruption vulnerability. CVE-2013-4156, bnc831578 - Data exposure using crafted OLE objects. CVE-2014-3575, bnc893141 The following...

LibreOffice < 3.6.7 / 4.0.4 / 4.1.0 .docm Import DoS

A version of LibreOffice prior to 3.6.7 / 4.0.4 / 4.1.0 is installed on the remote Windows host. It is, therefore, reportedly affected by a denial of service vulnerability. A flaw exists in the .docm import filter that could cause a NULL dereference. This could allow a remote attacker with a...

CVE-2013-4156

CVE-2013-4156 affects Apache OpenOffice.org prior to 4.0, where a crafted OOXML document element can trigger memory corruption, enabling remote denial of service (and possibly other impact). The provided connected docs reference LibreOffice/OpenOffice patches but do not specify a confirmed OpenOf...

KLA10243 DoS vulnerability in LibreOffice

An unspecified vulnerability was found in LibreOffice. By exploiting this vulnerability malicious users can cause denial of service. This vulnerability can be exploited remotely via a specially designed XML document. Original advisories LibreOffice advisory Related products LibreOffice CVE list...

Apache OpenOffice DOCM内存破坏漏洞(CVE-2013-4156)

BUGTRAQ ID: 61468 CVECAN ID: CVE-2013-4156 Apache OpenOffice是开源办公软件套装。 OpenOffice 3.4.0、3.4.1处理畸形OOXML文件内的XML元素不当会造成内存破坏，导致拒绝服务。 0 OpenOffice 3.4.0 - 3.4.1 厂商补丁： OpenOffice ---------- OpenOffice已经为此发布了一个安全公告（CVE-2013-4156）以及相应补丁: CVE-2013-4156：CVE-2013-4156...