The vulnerabilities of Debian GNU/Linux operating systems, Ubuntu, office software packages such as LibreOffice and Apache OpenOffice, allow attackers to trigger service failures or execute arbitrary code.

The vulnerability of the Debian GNU/Linux operating system, Ubuntu, and the office software packages LibreOffice and Apache OpenOffice is due to buffer overflow attacks. Exploiting this vulnerability allows an attacker to cause service failures or execute arbitrary code by accessing an nonexisten...

Oracle Linux 6 / 7 : libreoffice (ELSA-2015-2619)

The remote Oracle Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2015-2619 advisory. - CVE-2015-4551 Arbitrary file disclosure in Calc and Writer - CVE-2015-5212 Integer underflow in PrinterSetup length - CVE-2015-5213 Integer...

libreoffice: Bookmarks in DOC documents are insufficiently checked causing memory corruption

It was discovered that LibreOffice did not properly sanity check bookmark indexes. By tricking a user into opening a specially crafted document, an attacker could possibly use this flaw to execute arbitrary code with the privileges of the user opening the file...

libreoffice: Integer overflow in DOC files

An integer overflow flaw, leading to a heap-based buffer overflow, was found in the way LibreOffice processed certain Microsoft Word .doc files. By tricking a user into opening a specially crafted Microsoft Word .doc document, an attacker could possibly use this flaw to execute arbitrary code wit...

Threat Outbreak Alert RuleID19746: Email Messages Distributing Malicious Software on November 28, 2015

Medium Alert ID: 42340 First Published: 2015 November 30 14:02 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID19746 may contain the following files: Name |...

LiteCart 1.3.2 Cross Site Scripting Vulnerability

LiteCart version 1.3.2 suffers from a cross site scripting vulnerability. 1. Introduction Affected Product: LiteCart 1.3.2 Fixed in: 1.3.3 Fixed Version Link: https://www.litecart.net/downloading?version=1.3.3.1 Vendor Contact: email protected Vulnerability Type: XSS Remote Exploitable: Yes...

Apache OpenOffice < 4.1.2 Multiple Vulnerabilities

The version of Apache OpenOffice installed on the remote host is a version prior to 4.1.2. It is, therefore, affected by the following vulnerabilities : - An overflow condition exists in the Hangul Word Processor HWP filter due to improper validation of user-supplied input. A remote attacker can...

Threat Outbreak Alert RuleID7930KVR: Email Messages Distributing Malicious Software on July 14, 2016

Medium Alert ID: 42087 First Published: 2015 November 16 14:25 GMT Last Updated: 2016 July 19 12:31 GMT Version: 56 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID7930 an...

LibreOffice and Apache OpenOffice Memory Corruption Vulnerability

LibreOffice and Apache OpenOffice are both open source office software suites. The suite contains text documents, spreadsheets, presentations, drawings, databases and other software. The former by the Document Foundation The Document Foundation, TDF development; the latter by the United States...

CVE-2015-5214

LibreOffice before 4.4.6 and 5.x before 5.0.1 and Apache OpenOffice before 4.1.2 allows remote attackers to cause a denial of service memory corruption and application crash or execute arbitrary code via an index to a non-existent bookmark in a DOC file...

Integer overflow

Integer overflow in LibreOffice before 4.4.5 and Apache OpenOffice before 4.1.2 allows remote attackers to cause a denial of service memory corruption and application crash or possibly execute arbitrary code via a long DOC file, which triggers a buffer overflow...

CVE-2015-5214

LibreOffice before 4.4.6 and 5.x before 5.0.1 and Apache OpenOffice before 4.1.2 allows remote attackers to cause a denial of service memory corruption and application crash or execute arbitrary code via an index to a non-existent bookmark in a DOC file...

CVE-2015-5214

LibreOffice before 4.4.6 and 5.x before 5.0.1 and Apache OpenOffice before 4.1.2 allows remote attackers to cause a denial of service memory corruption and application crash or execute arbitrary code via an index to a non-existent bookmark in a DOC file...

CVE-2015-5213

Integer overflow in LibreOffice before 4.4.5 and Apache OpenOffice before 4.1.2 allows remote attackers to cause a denial of service memory corruption and application crash or possibly execute arbitrary code via a long DOC file, which triggers a buffer overflow...

CVE-2015-5214

LibreOffice before 4.4.6 and 5.x before 5.0.1 and Apache OpenOffice before 4.1.2 allows remote attackers to cause a denial of service memory corruption and application crash or execute arbitrary code via an index to a non-existent bookmark in a DOC file...

EUVD-2015-5212

LibreOffice before 4.4.6 and 5.x before 5.0.1 and Apache OpenOffice before 4.1.2 allows remote attackers to cause a denial of service memory corruption and application crash or execute arbitrary code via an index to a non-existent bookmark in a DOC file...

CVE-2015-5214

CVE-2015-5214 affects LibreOffice and Apache OpenOffice. The vulnerability arises from incorrect handling of bookmark indices in DOC files, allowing a remote attacker to trigger memory corruption and application crash or to execute arbitrary code. Affected versions include LibreOffice prior to 4....

CVE-2015-5213

Integer overflow in LibreOffice before 4.4.5 and Apache OpenOffice before 4.1.2 allows remote attackers to cause a denial of service memory corruption and application crash or possibly execute arbitrary code via a long DOC file, which triggers a buffer overflow...

KLA10700 Code execution vulnerability in LibreOffice

Lack of bookmarks restrictions was found in LibreOffice & OpenOffice. By exploiting this vulnerability malicious users can cause denial of service or execute arbitrary code. This vulnerability can be exploited remotely via a specially designed DOC file. Technical details To exploit this...

CVE-2015-5214: Improper Restriction of Operations within the Bounds of a Memory Buffer

LibreOffice before 4.4.6 and 5.x before 5.0.1 and Apache OpenOffice before 4.1.2 allows remote attackers to cause a denial of service memory corruption and application crash or execute arbitrary code via an index to a non-existent bookmark in a DOC file...