Mozilla: Crash with nested event loops

When manipulating user events in nested loops while opening a document through script, it is possible to trigger a potentially exploitable crash due to poor event handling. This vulnerability affects Firefox 63, Firefox ESR 60.3, and Thunderbird 60.3...

CVE-2018-3982

An exploitable arbitrary write vulnerability exists in the Word document parser of the Atlantis Word Processor 3.0.2.3 and 3.0.2.5. A specially crafted document can prevent Atlas from adding elements to an array that is indexed by a loop. When reading from this array, the application will use an...

Adobe Acrobat/Reader Security Bypass Vulnerability (CNVD-2018-11736)

Adobe Acrobat and Reader are the United States of America Audobee Adobe company's products. The former is a set of PDF file editing and conversion tools, the latter is a set of PDF document reading software. Adobe Acrobat/Reader has a security bypass vulnerability. Remote attackers can be induced...

CVE-2018-3845

In Hyland Perceptive Document Filters 11.4.0.2647 - x86/x64 Windows/Linux, a crafted OpenDocument document can lead to a SkCanvas object double free resulting in direct code execution...

PT-2018-16239 · Hyland · Hyland Perceptive Document Filters

Name of the Vulnerable Software and Affected Versions: Hyland Perceptive Document Filters versions 11.4.0.2647 and later, prior to the fixed version, are not specified, however, it is clear that version 11.4.0.2647 is affected. Description: A crafted OpenDocument document can cause a SkCanvas...

LibreOffice < 3.5.7 / 3.6.1 Multiple Denial of Service Vulnerabilities (Mac OS X)

A version of LibreOffice prior to 3.5.7 / 3.6.1 is installed on the remote Mac OS X host. It is, therefore, reportedly affected by multiple denial of service vulnerabilities in various import filters: - Excel .xls - Windows Meta File .wmf - Open Document Format .odg / .odt This could allow a remo...

LibreOffice < 3.5.7 / 3.6.1 Multiple Denial of Service Vulnerabilities

A version of LibreOffice prior to 3.5.7 / 3.6.1 is installed on the remote Windows host. It is, therefore, reportedly affected by multiple denial of service vulnerabilities in various import filters: - Excel .xls - Windows Meta File .wmf - Open Document Format .odg / .odt This could allow a remot...

LibreOffice XML Manifest Handling Buffer Overflow Vulnerabilities (Mac OS X)

This host is installed with LibreOffice and is prone to buffer overflow vulnerabilities. OpenVAS Vulnerability Test $Id: gblibreofficexmlmanifestbofvulnmacosx.nasl 5888 2017-04-07 09:01:53Z teissa $ LibreOffice XML Manifest Handling Buffer Overflow Vulnerabilities Mac OS X Authors: Rachana Shetty...

OpenOffice Multiple Buffer Overflow Vulnerabilities - Dec12 (Windows)

This host is installed with OpenOffice and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbopenofficemultbofvulndec12win.nasl 6018 2017-04-24 09:02:24Z teissa $ OpenOffice Multiple Buffer Overflow Vulnerabilities - Dec12 Windows Authors: Rachana Shetty Copyright: Copyright...

LibreOffice XML Manifest Handling Buffer Overflow Vulnerabilities (Windows)

This host is installed with LibreOffice and is prone to buffer overflow vulnerabilities. OpenVAS Vulnerability Test $Id: gblibreofficexmlmanifestbofvulnwin.nasl 5963 2017-04-18 09:02:14Z teissa $ LibreOffice XML Manifest Handling Buffer Overflow Vulnerabilities Windows Authors: Rachana Shetty...

LibreOffice XML Manifest Handling Buffer Overflow Vulnerabilities - Windows

LibreOffice is prone to buffer overflow vulnerabilities. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

LibreOffice Import Files Denial of Service Vulnerabilities (Windows)

This host is installed with LibreOffice and is prone to denial of service vulnerability. OpenVAS Vulnerability Test $Id: gblibreofficemultfilesdosvulnwin.nasl 7174 2017-09-18 11:48:08Z asteins $ LibreOffice Import Files Denial of Service Vulnerabilities Windows Authors: Rachana Shetty Copyright:...

LibreOffice Import Files Denial of Service Vulnerabilities - Windows

LibreOffice is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

LibreOffice Import Files Denial of Service Vulnerabilities - Mac OS X

LibreOffice is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

DEBIAN-CVE-2012-3456

Heap-based buffer overflow in the read function in filters/words/msword-odf/wv2/src/styles.cpp in the Microsoft import filter in Calligra 2.4.3 and earlier allows remote attackers to cause a denial of service application crash and possibly execute arbitrary code via a crafted ODF style in an ODF...

Ubuntu: Security Advisory (USN-1536-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

USN-1537-1: OpenOffice.org vulnerability

It was discovered that OpenOffice.org incorrectly handled certain encryption tags in Open Document Text .odt files. If a user were tricked into opening a specially crafted file, an attacker could cause OpenOffice.org to crash or possibly execute arbitrary code with the privileges of the user...

CVE-2012-2665

Multiple heap-based buffer overflows in the XML manifest encryption tag parsing functionality in OpenOffice.org and LibreOffice before 3.5.5 allow remote attackers to cause a denial of service and possibly execute arbitrary code via a crafted Open Document Text .odt file with 1 a child tag within...

CVE-2012-2665: Out-of-bounds Write

Multiple heap-based buffer overflows in the XML manifest encryption tag parsing functionality in OpenOffice.org and LibreOffice before 3.5.5 allow remote attackers to cause a denial of service and possibly execute arbitrary code via a crafted Open Document Text .odt file with 1 a child tag within...

PT-2012-1020 · Document Foundation +3 · Libreoffice +4

Name of the Vulnerable Software and Affected Versions: OpenOffice.org versions prior to 3.5.5 LibreOffice versions prior to 3.5.5 Description: The issue is related to a buffer overflow in the XML manifest encryption tag parsing functionality. This can be exploited by a remote attacker using a...