Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

redhat логотип

CVE-2018-10119

Опубликовано: 28 янв. 2018
Источник: redhat
CVSS3: 6.6

Описание

sot/source/sdstor/stgstrms.cxx in LibreOffice before 5.4.5.1 and 6.x before 6.0.1.1 uses an incorrect integer data type in the StgSmallStrm class, which allows remote attackers to cause a denial of service (use-after-free with write access) or possibly have unspecified other impact via a crafted document that uses the structured storage ole2 wrapper file format.

Затронутые пакеты

ПлатформаПакетСостояниеРекомендацияРелиз
Red Hat Enterprise Linux 6libreofficeWill not fix
Red Hat Enterprise Linux 8libreofficeNot affected
Red Hat Enterprise Linux 7libreofficeFixedRHSA-2018:305430.10.2018

Показывать по

Дополнительная информация

Статус:

Moderate
Дефект:
CWE-190->CWE-416
https://bugzilla.redhat.com/show_bug.cgi?id=1569836libreoffice: Use-after-free in sdstor/stgstrms.cxx:StgSmallStrm class allows for denial of service with crafted document

6.6 Medium

CVSS3

Связанные уязвимости

CVSS3: 7.8
ubuntu
почти 8 лет назад

sot/source/sdstor/stgstrms.cxx in LibreOffice before 5.4.5.1 and 6.x before 6.0.1.1 uses an incorrect integer data type in the StgSmallStrm class, which allows remote attackers to cause a denial of service (use-after-free with write access) or possibly have unspecified other impact via a crafted document that uses the structured storage ole2 wrapper file format.

CVSS3: 7.8
nvd
почти 8 лет назад

sot/source/sdstor/stgstrms.cxx in LibreOffice before 5.4.5.1 and 6.x before 6.0.1.1 uses an incorrect integer data type in the StgSmallStrm class, which allows remote attackers to cause a denial of service (use-after-free with write access) or possibly have unspecified other impact via a crafted document that uses the structured storage ole2 wrapper file format.

CVSS3: 7.8
debian
почти 8 лет назад

sot/source/sdstor/stgstrms.cxx in LibreOffice before 5.4.5.1 and 6.x b ...

CVSS3: 7.8
github
больше 3 лет назад

sot/source/sdstor/stgstrms.cxx in LibreOffice before 5.4.5.1 and 6.x before 6.0.1.1 uses an incorrect integer data type in the StgSmallStrm class, which allows remote attackers to cause a denial of service (use-after-free with write access) or possibly have unspecified other impact via a crafted document that uses the structured storage ole2 wrapper file format.

CVSS3: 3.3
fstec
почти 8 лет назад

Уязвимость функции SwCTBWrapper :: Read пакета офисных программ LibreOffice, позволяющая нарушителю выполнить произвольный код или вызвать отказ в обслуживании

6.6 Medium

CVSS3