Lucene search
K

30 matches found

EUVD
EUVD
added 2025/10/07 12:30 a.m.0 views

EUVD-2021-12531

Malware in sbrugna...

5.2CVSS7.5AI score0.00045EPSS
Exploits0References8
Vulnrichment
Vulnrichment
added 2025/03/21 2:52 p.m.10 views

CVE-2021-25635 Content Manipulation with Certificate Validation Attack

An Improper Certificate Validation vulnerability in LibreOffice allowed an attacker to self sign an ODF document, with a signature untrusted by the target, then modify it to change the signature algorithm to an invalid or unknown to LibreOffice algorithm and LibreOffice would incorrectly present...

5.2CVSS6.3AI score0.00045EPSS
Exploits0References1
SUSE CVE
SUSE CVE
added 2023/02/15 5:16 a.m.1 views

SUSE CVE-2015-5212

Integer underflow in LibreOffice before 4.4.5 and Apache OpenOffice before 4.1.2, when the configuration setting "Load printer settings with the document" is enabled, allows remote attackers to cause a denial of service memory corruption and application crash or possibly execute arbitrary code vi...

6.8CVSS8.1AI score0.43027EPSS
Exploits0References6
SUSE CVE
SUSE CVE
added 2023/02/15 3:45 a.m.1 views

SUSE CVE-2021-25634

LibreOffice supports digital signatures of ODF documents and macros within documents, presenting visual aids that no alteration of the document occurred since the last signing and that the signature is valid. An Improper Certificate Validation vulnerability in LibreOffice allowed an attacker to...

7.5CVSS6.8AI score0.00296EPSS
Exploits0References3
RedhatCVE
RedhatCVE
added 2022/02/22 12:49 p.m.40 views

CVE-2021-25636

A improper certificate validation flaw was found in LibreOffice allowing an attacker to manipulate a digitally signed ODF document to appear that no alteration of the document occurred since the last signing and that the signature is valid...

7.5CVSS3.6AI score0.0022EPSS
Exploits0References4
CNVD
CNVD
added 2021/10/18 12:0 a.m.27 views

LibreOffice Trust Management Issues Vulnerability (CNVD-2022-55627)

LibreOffice is a suite that is compatible with other major office softwares and can be executed on a variety of platforms. A vulnerability exists in LibreOffice due to a trust management issue. An attacker could use this vulnerability to create digitally signed ODF documents by manipulating the...

7.5CVSS7.2AI score0.00385EPSS
Exploits0References1
CVE
CVE
added 2021/10/12 1:33 p.m.169 views

CVE-2021-25634

Summary: CVE-2021-25634 is a LibreOffice vulnerability described as an Improper Certificate Validation issue that allows an attacker to modify a digitally signed ODF document to insert an additional signing time timestamp, which LibreOffice may incorrectly treat as valid. The issue affects The Do...

7.5CVSS6AI score0.00296EPSS
Exploits0References2Affected Software1
Tenable Nessus
Tenable Nessus
added 2016/03/10 12:0 a.m.30 views

GLSA-201603-05 : LibreOffice, OpenOffice: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-201603-05 LibreOffice, OpenOffice: Multiple vulnerabilities Multiple vulnerabilities were found in both LibreOffice and OpenOffice that allow the remote execution of arbitrary code and potential Denial of Service. These...

9.3CVSS7.2AI score0.43027EPSS
Exploits0References10
Check Point Advisories
Check Point Advisories
added 2016/03/08 12:0 a.m.1 views

LibreOffice and OpenOffice ODF Document PrinterSetup Integer Underflow (CVE-2015-5212)

An integer underflow vulnerability exists in LibreOffice and OpenOffice. The vulnerability is due to insufficient size checks when processing the PrinterSetup data within ODF documents. A remote unauthenticated attacker can exploit this vulnerability by enticing a user to open a specially crafted...

6.8CVSS5.9AI score0.43027EPSS
Exploits0
Tenable Nessus
Tenable Nessus
added 2015/11/17 12:0 a.m.57 views

Apache OpenOffice < 4.1.2 Multiple Vulnerabilities

The version of Apache OpenOffice installed on the remote host is a version prior to 4.1.2. It is, therefore, affected by the following vulnerabilities : - An overflow condition exists in the Hangul Word Processor HWP filter due to improper validation of user-supplied input. A remote attacker can...

6.8CVSS7.5AI score0.43027EPSS
Exploits0References10
NVD
NVD
added 2015/11/10 5:59 p.m.16 views

CVE-2015-5212

Integer underflow in LibreOffice before 4.4.5 and Apache OpenOffice before 4.1.2, when the configuration setting "Load printer settings with the document" is enabled, allows remote attackers to cause a denial of service memory corruption and application crash or possibly execute arbitrary code vi...

6.8CVSS7.8AI score0.43027EPSS
Exploits0References11
OSV
OSV
added 2015/11/10 5:59 p.m.8 views

CVE-2015-5212

Integer underflow in LibreOffice before 4.4.5 and Apache OpenOffice before 4.1.2, when the configuration setting "Load printer settings with the document" is enabled, allows remote attackers to cause a denial of service memory corruption and application crash or possibly execute arbitrary code vi...

6.8CVSS7.8AI score0.43027EPSS
Exploits0References12
Prion
Prion
added 2015/11/10 5:59 p.m.24 views

Integer overflow

Integer underflow in LibreOffice before 4.4.5 and Apache OpenOffice before 4.1.2, when the configuration setting "Load printer settings with the document" is enabled, allows remote attackers to cause a denial of service memory corruption and application crash or possibly execute arbitrary code vi...

6.8CVSS8.5AI score0.43027EPSS
Exploits0References11Affected Software4
CVE
CVE
added 2015/11/10 4:0 p.m.128 views

CVE-2015-5212

CVE-2015-5212 describes an integer underflow in LibreOffice (pre-4.4.5) and Apache OpenOffice (pre-4.1.2) when the document loads printer settings (PrinterSetup) with the document. A remote attacker can trigger memory corruption or potentially execute arbitrary code, via crafted ODF documents, le...

6.8CVSS8.1AI score0.43027EPSS
Exploits0References11Affected Software1
Cvelist
Cvelist
added 2015/11/10 4:0 p.m.17 views

CVE-2015-5212

Integer underflow in LibreOffice before 4.4.5 and Apache OpenOffice before 4.1.2, when the configuration setting "Load printer settings with the document" is enabled, allows remote attackers to cause a denial of service memory corruption and application crash or possibly execute arbitrary code vi...

8.2AI score0.43027EPSS
Exploits0References11
Debian CVE
Debian CVE
added 2015/11/10 4:0 p.m.28 views

CVE-2015-5212

Integer underflow in LibreOffice before 4.4.5 and Apache OpenOffice before 4.1.2, when the configuration setting "Load printer settings with the document" is enabled, allows remote attackers to cause a denial of service memory corruption and application crash or possibly execute arbitrary code vi...

6.8CVSS8.3AI score0.43027EPSS
Exploits0
OSV
OSV
added 2015/11/03 6:0 p.m.0 views

UBUNTU-CVE-2015-5212

Integer underflow in LibreOffice before 4.4.5 and Apache OpenOffice before 4.1.2, when the configuration setting "Load printer settings with the document" is enabled, allows remote attackers to cause a denial of service memory corruption and application crash or possibly execute arbitrary code vi...

6.8CVSS7.5AI score0.43027EPSS
Exploits0References4
UbuntuCve
UbuntuCve
added 2015/11/03 6:0 p.m.17 views

CVE-2015-5212

Integer underflow in LibreOffice before 4.4.5 and Apache OpenOffice before 4.1.2, when the configuration setting "Load printer settings with the document" is enabled, allows remote attackers to cause a denial of service memory corruption and application crash or possibly execute arbitrary code vi...

6.8CVSS7.2AI score0.43027EPSS
Exploits0References3
NVD
NVD
added 2012/08/20 7:55 p.m.11 views

CVE-2012-3455

Heap-based buffer overflow in the read function in filters/words/msword-odf/wv2/src/styles.cpp in the Microsoft import filter in KOffice 2.3.3 and earlier allows remote attackers to cause a denial of service application crash and possibly execute arbitrary code via a crafted ODF style in an ODF...

7.5CVSS7.6AI score0.0661EPSS
Exploits0References12
Prion
Prion
added 2012/08/20 7:55 p.m.13 views

Heap overflow

Heap-based buffer overflow in the read function in filters/words/msword-odf/wv2/src/styles.cpp in the Microsoft import filter in KOffice 2.3.3 and earlier allows remote attackers to cause a denial of service application crash and possibly execute arbitrary code via a crafted ODF style in an ODF...

7.5CVSS8.1AI score0.42173EPSS
Exploits1References12Affected Software1
Rows per page
Query Builder