157 matches found
CVE-2016-4324
Use-after-free vulnerability in LibreOffice before 5.1.4 allows remote attackers to execute arbitrary code via a crafted RTF file, related to stylesheet and superscript tokens...
UBUNTU-CVE-2016-4324
Use-after-free vulnerability in LibreOffice before 5.1.4 allows remote attackers to execute arbitrary code via a crafted RTF file, related to stylesheet and superscript tokens...
CVE-2016-4324
Use-after-free vulnerability in LibreOffice before 5.1.4 allows remote attackers to execute arbitrary code via a crafted RTF file, related to stylesheet and superscript tokens...
KLA10837 Code execution vulnerabilities in LibreOffice
Lack of validation was found in LibreOffice. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited remotely via a specially designed RTF file. Original advisories LibreOffice advisory Related products LibreOffice CVE list CVE-2016-4324 hi...
In-depth analysis of Microsoft Office RTF file stack overflow vulnerability, CVE-2 0 1 6-0 0 1 0-a vulnerability warning-the black bar safety net
0×0 1 Summary In this month's Microsoft patch Tuesday, Microsoft fixes 3 Office vulnerability MS16-0 0 4。 This vulnerability is due to MS Office not correctly parse the RTF document caused by a heap overflow vulnerability successful exploitation of this vulnerability may enable an attacker to...
MS15-069: Vulnerabilities in Windows Could Allow Remote Code Execution (3072631)
The remote Windows host is affected by multiple remote code execution vulnerabilities : - A remote code execution vulnerability exists due to improper handling of the loading of dynamic link library DLL files. A remote attacker can exploit this vulnerability by placing a specially crafted DLL fil...
Microsoft Word Intruder RTF FILE
Malicious word documents can be created using Microsoft Word Intruder MWI. This tool can be used in targeted attacks. Successful infection will allow the attacker to download additional malware to the target...
LibreOffice < 4.2.8 / 4.3.5 RTF File Handling Code Execution
The version of LibreOffice installed on the remote Windows host is prior to 4.2.7 or 4.3.x prior to 4.3.5. It is, therefore, affected by an invalid memory write vulnerability. An attacker, using a specially crafted Rich Text Format RTF file, can exploit this to cause a denial of service or possib...
Updated unrtf package fixes security vulnerability
Updated unrtf package fixes security vulnerability: Hanno Böck also reported a number of other crashes in unrtf besides the ones associated with CVE-2014-9275. These could allow a denial of service when opening a malicious malformed RTF file which causes unrtf to crash...
unrtf: arbitrary code execution
CVE-2014-9274 arbitrary code execution A flaw allows remote attackers to cause a denial of service crash and possibly execute arbitrary code as demonstrated by a file containing the string "\cb-999999999". - CVE-2014-9275 arbitrary code execution A flaw allows remote attackers to cause a denial...
CVE-2014-9275
UnRTF allows remote attackers to cause a denial of service out-of-bounds memory access and crash and possibly execute arbitrary code via a crafted RTF file...
CVE-2014-9275
UnRTF allows remote attackers to cause a denial of service out-of-bounds memory access and crash and possibly execute arbitrary code via a crafted RTF file...
CVE-2014-9275
UnRTF allows remote attackers to cause a denial of service out-of-bounds memory access and crash and possibly execute arbitrary code via a crafted RTF file...
CVE-2014-9275
UnRTF contains CVEs CVE-2014-9274 and CVE-2014-9275. The issues allow remote attackers to cause denial of service (crash/out-of-bounds access) and potentially execute arbitrary code via crafted RTF files. Affected software is UnRTF (RTF converter); root causes involve memory access/crashes descri...
LibreOffice RTF File Handling Multiple Vulnerabilities (Nov 2014) - Windows
LibreOffice is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:libreoffice:libreoffice";...
LibreOffice RTF File Handling Multiple Vulnerabilities (Nov 2014) - Mac OS X
LibreOffice is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:libreoffice:libreoffice";...
CVE-2014-9093
LibreOffice before 4.3.5 allows remote attackers to cause a denial of service invalid write operation and crash and possibly execute arbitrary code via a crafted RTF file...
CVE-2014-9093
LibreOffice before 4.3.5 allows remote attackers to cause a denial of service invalid write operation and crash and possibly execute arbitrary code via a crafted RTF file...
Design/Logic Flaw
LibreOffice before 4.3.5 allows remote attackers to cause a denial of service invalid write operation and crash and possibly execute arbitrary code via a crafted RTF file...