Oracle Linux 7 : libreoffice (ELSA-2017-0914)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2017-0914 advisory. - Resolves: rhbz1435534 CVE-2017-3157 Arbitrary file disclosure in Calc and Writer - Resolves: rhbz1353839 CVE-2016-4324 dereference of invalid STL iterator on...

libreoffice: Arbitrary file disclosure in Calc and Writer

It was found that LibreOffice disclosed contents of a file specified in an embedded object's preview. An attacker could potentially use this flaw to expose details of a system running LibreOffice as an online service via a crafted document...

libreoffice security and bug fix update

1:5.0.6.2-5.0.1.1 - Replaced RedHat colors with Oracle colors, and the filename redhat.soc with oracle.soc in specfile - Build with --with-vendor='Oracle America, Inc.' 1:5.0.6.2-5.1 - Resolves: rhbz1435534 CVE-2017-3157 Arbitrary file disclosure in Calc and Writer 1:5.0.6.2-5 - Resolves:...

apache-cxf: XSS in Apache CXF FormattedServiceListWriter

A vulnerability was found in FormattedServiceListWriter in Apache CXF HTTP transport module that could allow an attacker to inject unexpected matrix parameters into the request URL. On a successful injection these matrix parameters will find their way back to the client in the services list page...

UBUNTU-CVE-2016-10053

The WriteTIFFImage function in coders/tiff.c in ImageMagick before 6.9.5-8 allows remote attackers to cause a denial of service divide-by-zero error and application crash via a crafted file...

LibreOffice Calc And Writer File Disclosure Vulnerability - Mac OS X

LibreOffice is prone to arbitrary file disclosure vulnerability. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

LibreOffice Information Disclosure Vulnerability

LibreOffice is an open source office software suite. The suite includes software for text documents, spreadsheets, presentations, drawings, databases, and more, and is developed by The Document Foundation The Document Foundation, TDF. A security vulnerability exists in LibreOffice Calc and Writer...

Debian DSA-3792-1 : libreoffice - security update

Ben Hayak discovered that objects embedded in Writer and Calc documents may result in information disclosure. Please see https://www.libreoffice.org/about-us/security/advisories/cve-2017-3157 /for additional information. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text an...

Ubuntu 14.04 LTS / 16.04 LTS : LibreOffice vulnerability (USN-3210-1)

The remote Ubuntu 14.04 LTS / 16.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-3210-1 advisory. Ben Hayak discovered that it was possible to make LibreOffice Calc and Writer disclose arbitrary files to an attacker if a user opened a specially...

USN-3210-1: LibreOffice vulnerability

Ben Hayak discovered that it was possible to make LibreOffice Calc and Writer disclose arbitrary files to an attacker if a user opened a specially crafted file with embedded links...

PT-2017-4205 · Gd +3 · Gd Graphics Library +3

Name of the Vulnerable Software and Affected Versions: GD Graphics Library versions through 2.2.5 Description: The issue is related to a heap-based buffer over-read in the tiffWriter function in gd tiff.c. This can allow a remote attacker to access confidential data and cause a denial of service...

No Transaction Logs Truncated After Backup of Exchange DAG Passive Node

Article Applicability This article documents a niche issue caused by changes being made to the Exchange configuration. Challenge This article is specific to a scenario where all of the following are true: Microsoft Exchange transaction logs are not truncated after the backup completes. The...

Wordpress recipes-writer plugin cross-site scripting vulnerability

WordPress is the WordPress Software Foundation's set of blogging platform developed using the PHP language, the platform supports in PHP and MySQL servers to set up a personal blog site. recipes-writer is one of the plug-ins used to write a standardized blog. A cross-site scripting vulnerability...

CVE-2016-1000147

Reflected XSS in wordpress plugin recipes-writer v1.0.4...

CVE-2016-1000147

Reflected XSS in wordpress plugin recipes-writer v1.0.4...

CVE-2016-1000147

CVE-2016-1000147 affects the WordPress plugin recipes-writer up to version 1.0.4, with a Reflected XSS vulnerability in the plugin. The issue is documented across multiple sources (NVD entry states Reflected XSS in recipes-writer v1.0.4; patches/advisories from Patchstack and WPVulndb reiterate X...

DEBIAN-CVE-2016-6250

Integer overflow in the ISO9660 writer in libarchive before 3.2.1 allows remote attackers to cause a denial of service application crash or execute arbitrary code via vectors related to verifying filename lengths when writing an ISO9660 archive, which trigger a buffer overflow...

Integer overflow

Integer overflow in the ISO9660 writer in libarchive before 3.2.1 allows remote attackers to cause a denial of service application crash or execute arbitrary code via vectors related to verifying filename lengths when writing an ISO9660 archive, which trigger a buffer overflow...

CVE-2016-6250

Integer overflow in the ISO9660 writer in libarchive before 3.2.1 allows remote attackers to cause a denial of service application crash or execute arbitrary code via vectors related to verifying filename lengths when writing an ISO9660 archive, which trigger a buffer overflow...

CVE-2016-6250

Summary: CVE-2016-6250 affects libarchive’s ISO9660 writer and causes an integer overflow when verifying filename lengths during ISO9660 archive creation, potentially triggering a buffer overflow that can crash the application or allow code execution. Public disclosures and multiple vendor adviso...