Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

redhat логотип

CVE-2017-12608

Опубликовано: 26 окт. 2017
Источник: redhat
CVSS3: 7

Описание

A vulnerability in Apache OpenOffice Writer DOC file parser before 4.1.4, and specifically in ImportOldFormatStyles, allows attackers to craft malicious documents that cause denial of service (memory corruption and application crash) potentially resulting in arbitrary code execution.

Затронутые пакеты

ПлатформаПакетСостояниеРекомендацияРелиз
Red Hat Enterprise Linux 6libreofficeWill not fix
Red Hat Enterprise Linux 7libreofficeNot affected

Показывать по

Дополнительная информация

Статус:

Moderate
Дефект:
CWE-787
https://bugzilla.redhat.com/show_bug.cgi?id=1507806libreoffice: Out-of-bounds write in the WW8RStyle::ImportOldFormatStyles functionality

7 High

CVSS3

Связанные уязвимости

CVSS3: 7.8
ubuntu
около 8 лет назад

A vulnerability in Apache OpenOffice Writer DOC file parser before 4.1.4, and specifically in ImportOldFormatStyles, allows attackers to craft malicious documents that cause denial of service (memory corruption and application crash) potentially resulting in arbitrary code execution.

CVSS3: 7.8
nvd
около 8 лет назад

A vulnerability in Apache OpenOffice Writer DOC file parser before 4.1.4, and specifically in ImportOldFormatStyles, allows attackers to craft malicious documents that cause denial of service (memory corruption and application crash) potentially resulting in arbitrary code execution.

CVSS3: 7.8
debian
около 8 лет назад

A vulnerability in Apache OpenOffice Writer DOC file parser before 4.1 ...

CVSS3: 7.8
github
больше 3 лет назад

A vulnerability in Apache OpenOffice Writer DOC file parser before 4.1.4, and specifically in ImportOldFormatStyles, allows attackers to craft malicious documents that cause denial of service (memory corruption and application crash) potentially resulting in arbitrary code execution.

CVSS3: 8.8
fstec
больше 8 лет назад

Уязвимость функции ImportOldFormatStyles анализатора DOC-файлов офисного пакета Apache OpenOffice, позволяющая нарушителю выполнить произвольный код

7 High

CVSS3