Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

debian логотип

CVE-2017-12607

Опубликовано: 20 нояб. 2017
Источник: debian

Описание

A vulnerability in OpenOffice's PPT file parser before 4.1.4, and specifically in PPTStyleSheet, allows attackers to craft malicious documents that cause denial of service (memory corruption and application crash) potentially resulting in arbitrary code execution.

Пакеты

ПакетСтатусВерсия исправленияРелизТип
libreofficefixed1:5.0.2-1package

Примечания

  • https://www.talosintelligence.com/reports/TALOS-2017-0300

  • https://www.libreoffice.org/about-us/security/advisories/CVE-2017-12607

  • https://cgit.freedesktop.org/libreoffice/core/commit/?id=334dba623dfb0c4fb2b5292c2d03741b7b33aef1

Связанные уязвимости

CVSS3: 7.8
ubuntu
около 8 лет назад

A vulnerability in OpenOffice's PPT file parser before 4.1.4, and specifically in PPTStyleSheet, allows attackers to craft malicious documents that cause denial of service (memory corruption and application crash) potentially resulting in arbitrary code execution.

CVSS3: 7
redhat
больше 8 лет назад

A vulnerability in OpenOffice's PPT file parser before 4.1.4, and specifically in PPTStyleSheet, allows attackers to craft malicious documents that cause denial of service (memory corruption and application crash) potentially resulting in arbitrary code execution.

CVSS3: 7.8
nvd
около 8 лет назад

A vulnerability in OpenOffice's PPT file parser before 4.1.4, and specifically in PPTStyleSheet, allows attackers to craft malicious documents that cause denial of service (memory corruption and application crash) potentially resulting in arbitrary code execution.

CVSS3: 7.8
github
больше 3 лет назад

A vulnerability in OpenOffice's PPT file parser before 4.1.4, and specifically in PPTStyleSheet, allows attackers to craft malicious documents that cause denial of service (memory corruption and application crash) potentially resulting in arbitrary code execution.

CVSS3: 7.8
fstec
больше 8 лет назад

Уязвимость функции PPTStyleSheet анализатора PPT-файлов офисного пакета Apache OpenOffice, позволяющая нарушителю выполнить произвольный код