Описание
Use-after-free vulnerability in LibreOffice before 5.1.4 allows remote attackers to execute arbitrary code via a crafted RTF file, related to stylesheet and superscript tokens.
A use-after-free vulnerability was found in the Rich Text Format (RTF) document format parser in LibreOffice. By tricking a user into opening a specially crafted RTF document, an attacker could possibly use this flaw to execute arbitrary code with the privileges of the user opening the file.
Затронутые пакеты
| Платформа | Пакет | Состояние | Рекомендация | Релиз |
|---|---|---|---|---|
| Red Hat Enterprise Linux 5 | openoffice.org | Not affected | ||
| Red Hat Enterprise Linux 6 | libreoffice | Not affected | ||
| Red Hat Enterprise Linux 7 | libreoffice | Not affected |
Показывать по
Дополнительная информация
Статус:
EPSS
7.8 High
CVSS3
6.8 Medium
CVSS2
Связанные уязвимости
Use-after-free vulnerability in LibreOffice before 5.1.4 allows remote attackers to execute arbitrary code via a crafted RTF file, related to stylesheet and superscript tokens.
Use-after-free vulnerability in LibreOffice before 5.1.4 allows remote attackers to execute arbitrary code via a crafted RTF file, related to stylesheet and superscript tokens.
Use-after-free vulnerability in LibreOffice before 5.1.4 allows remote ...
EPSS
7.8 High
CVSS3
6.8 Medium
CVSS2