267 matches found
CVE-2021-25633
LibreOffice supports digital signatures of ODF documents and macros within documents, presenting visual aids that no alteration of the document occurred since the last signing and that the signature is valid. An Improper Certificate Validation vulnerability in LibreOffice allowed an attacker to...
UBUNTU-CVE-2021-25633
LibreOffice supports digital signatures of ODF documents and macros within documents, presenting visual aids that no alteration of the document occurred since the last signing and that the signature is valid. An Improper Certificate Validation vulnerability in LibreOffice allowed an attacker to...
CVE-2021-25633
CVE-2021-25633 affects The Document Foundation LibreOffice. It is an Improper Certificate Validation vulnerability where an attacker can create a digitally signed ODF document by manipulating documentsignatures.xml or macrosignatures.xml; LibreOffice may display a valid signature while the conten...
CVE-2021-25633
LibreOffice supports digital signatures of ODF documents and macros within documents, presenting visual aids that no alteration of the document occurred since the last signing and that the signature is valid. An Improper Certificate Validation vulnerability in LibreOffice allowed an attacker to...
CVE-2021-25633
LibreOffice supports digital signatures of ODF documents and macros within documents, presenting visual aids that no alteration of the document occurred since the last signing and that the signature is valid. An Improper Certificate Validation vulnerability in LibreOffice allowed an attacker to...
CVE-2021-25633
LibreOffice supports digital signatures of ODF documents and macros within documents, presenting visual aids that no alteration of the document occurred since the last signing and that the signature is valid. An Improper Certificate Validation vulnerability in LibreOffice allowed an attacker to...
CVE-2021-25634
LibreOffice supports digital signatures of ODF documents and macros within documents, presenting visual aids that no alteration of the document occurred since the last signing and that the signature is valid. An Improper Certificate Validation vulnerability in LibreOffice allowed an attacker to...
LibreOffice 信任管理问题漏洞
LibreOffice is a suite that is compatible with other major office softwares and can be executed on a variety of platforms. A vulnerability exists in LibreOffice due to a trust management issue. An attacker could use this vulnerability to create digitally signed ODF documents by manipulating the...
CVE-2021-25633: Improper Certificate Validation
LibreOffice supports digital signatures of ODF documents and macros within documents, presenting visual aids that no alteration of the document occurred since the last signing and that the signature is valid. An Improper Certificate Validation vulnerability in LibreOffice allowed an attacker to...
PT-2021-5591
Name of the Vulnerable Software and Affected Versions LibreOffice affected versions not specified Description The issue is related to errors in the certificate authentication procedure of LibreOffice, allowing a remote attacker to create an ODF document with a digital signature. Recommendations A...
CVE-2021-40439
CVE-2021-40439 maps to Apache OpenOffice’s use of expat. The issue stems from the historic Billion Laughs XML entity expansion vulnerability (CVE-2013-0340) affecting expat in OpenOffice builds up to 4.1.10, with Expat patched in 4.1.11. The linked CNVD entry describes XML external entity injecti...
PT-2021-4375
Name of the Vulnerable Software and Affected Versions Apache OpenOffice versions prior to 4.1.11 Description The issue is related to errors in cryptographic signature verification, allowing a remote attacker to modify the content of an ODF document. It is possible for an attacker to manipulate...
PT-2021-22894
Name of the Vulnerable Software and Affected Versions Apache OpenOffice versions prior to 4.1.11 Description The issue is related to a dependency on expat software, which is vulnerable to a "Billion Laughs" entity expansion denial of service attack. This can be exploited via crafted XML files...
DEBIAN-CVE-2020-23266
An issue was discovered in gpac 0.8.0. The ODReadUTF8String function in odfcode.c has a heap-based buffer overflow which can lead to a denial of service DOS via a crafted media file...
GPAC 缓冲区错误漏洞
GPAC is a multimedia framework for rich media and is distributed under the LGPL license. a heap buffer overflow vulnerability exists in the ODReadUTF8String function in odfcode.c in GPAC version 0.8.0. An attacker could exploit the vulnerability to cause a denial of service via specially crafted...
UBUNTU-CVE-2021-32271
An issue was discovered in gpac through 20200801. A stack-buffer-overflow exists in the function DumpRawUIConfig located in odfdump.c. It allows an attacker to cause code Execution...
GPAC 缓冲区错误漏洞
GPAC is a multimedia framework for rich media and is distributed under the LGPL license. a stack buffer overflow vulnerability exists in the DumpRawUIConfig function in odfdump.c in GPAC 20200801 and earlier versions. An attacker could exploit this vulnerability to execute code...
PT-2021-6538
Name of the Vulnerable Software and Affected Versions GPAC version 1.0.1 Description The issue is related to the gf odf desc copy function in the MP4Box command, which allows attackers to cause a denial of service NULL pointer dereference via a crafted file. This can be exploited by a remote...