Поиск уязвимостей
Количество 21
Количество 21
ALT-PU-2018-1273
ALT-PU-2018-1273: package `LibreOffice` update to version 6.0.1.1-alt1
CVE-2018-10119
sot/source/sdstor/stgstrms.cxx in LibreOffice before 5.4.5.1 and 6.x before 6.0.1.1 uses an incorrect integer data type in the StgSmallStrm class, which allows remote attackers to cause a denial of service (use-after-free with write access) or possibly have unspecified other impact via a crafted document that uses the structured storage ole2 wrapper file format.
CVE-2018-10119
sot/source/sdstor/stgstrms.cxx in LibreOffice before 5.4.5.1 and 6.x before 6.0.1.1 uses an incorrect integer data type in the StgSmallStrm class, which allows remote attackers to cause a denial of service (use-after-free with write access) or possibly have unspecified other impact via a crafted document that uses the structured storage ole2 wrapper file format.
CVE-2018-10119
sot/source/sdstor/stgstrms.cxx in LibreOffice before 5.4.5.1 and 6.x before 6.0.1.1 uses an incorrect integer data type in the StgSmallStrm class, which allows remote attackers to cause a denial of service (use-after-free with write access) or possibly have unspecified other impact via a crafted document that uses the structured storage ole2 wrapper file format.
CVE-2018-10119
sot/source/sdstor/stgstrms.cxx in LibreOffice before 5.4.5.1 and 6.x b ...
CVE-2018-6871
LibreOffice before 5.4.5 and 6.x before 6.0.1 allows remote attackers to read arbitrary files via =WEBSERVICE calls in a document, which use the COM.MICROSOFT.WEBSERVICE function.
CVE-2018-6871
LibreOffice before 5.4.5 and 6.x before 6.0.1 allows remote attackers to read arbitrary files via =WEBSERVICE calls in a document, which use the COM.MICROSOFT.WEBSERVICE function.
CVE-2018-6871
LibreOffice before 5.4.5 and 6.x before 6.0.1 allows remote attackers to read arbitrary files via =WEBSERVICE calls in a document, which use the COM.MICROSOFT.WEBSERVICE function.
CVE-2018-6871
LibreOffice before 5.4.5 and 6.x before 6.0.1 allows remote attackers ...
GHSA-4wrw-jm7c-gf3x
sot/source/sdstor/stgstrms.cxx in LibreOffice before 5.4.5.1 and 6.x before 6.0.1.1 uses an incorrect integer data type in the StgSmallStrm class, which allows remote attackers to cause a denial of service (use-after-free with write access) or possibly have unspecified other impact via a crafted document that uses the structured storage ole2 wrapper file format.
BDU:2019-00715
Уязвимость функции SwCTBWrapper :: Read пакета офисных программ LibreOffice, позволяющая нарушителю выполнить произвольный код или вызвать отказ в обслуживании
openSUSE-SU-2018:0446-1
Security update for libreoffice
SUSE-SU-2018:0443-1
Security update for libreoffice
SUSE-SU-2018:0428-1
Security update for libreoffice
GHSA-4xgr-65gv-68q9
LibreOffice before 5.4.5 and 6.x before 6.0.1 allows remote attackers to read arbitrary files via =WEBSERVICE calls in a document, which use the COM.MICROSOFT.WEBSERVICE function.
ELSA-2018-0517
ELSA-2018-0517: libreoffice security update (MODERATE)
ELSA-2018-0418
ELSA-2018-0418: libreoffice security update (MODERATE)
BDU:2019-00714
Уязвимость компонента COM.MICROSOFT.WEBSERVICE пакета офисных программ LibreOffice, позволяющая нарушителю получить доступ к защищаемой информации
openSUSE-SU-2018:1311-1
Security update for libreoffice
SUSE-SU-2018:1296-1
Security update for libreoffice
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
| ALT-PU-2018-1273 ALT-PU-2018-1273: package `LibreOffice` update to version 6.0.1.1-alt1 | CVSS3: 9.8 | больше 8 лет назад | |
 | CVE-2018-10119 sot/source/sdstor/stgstrms.cxx in LibreOffice before 5.4.5.1 and 6.x before 6.0.1.1 uses an incorrect integer data type in the StgSmallStrm class, which allows remote attackers to cause a denial of service (use-after-free with write access) or possibly have unspecified other impact via a crafted document that uses the structured storage ole2 wrapper file format. | CVSS3: 7.8 | 2% Низкий | больше 8 лет назад |
 | CVE-2018-10119 sot/source/sdstor/stgstrms.cxx in LibreOffice before 5.4.5.1 and 6.x before 6.0.1.1 uses an incorrect integer data type in the StgSmallStrm class, which allows remote attackers to cause a denial of service (use-after-free with write access) or possibly have unspecified other impact via a crafted document that uses the structured storage ole2 wrapper file format. | CVSS3: 6.6 | 2% Низкий | почти 9 лет назад |
 | CVE-2018-10119 sot/source/sdstor/stgstrms.cxx in LibreOffice before 5.4.5.1 and 6.x before 6.0.1.1 uses an incorrect integer data type in the StgSmallStrm class, which allows remote attackers to cause a denial of service (use-after-free with write access) or possibly have unspecified other impact via a crafted document that uses the structured storage ole2 wrapper file format. | CVSS3: 7.8 | 2% Низкий | больше 8 лет назад |
| CVE-2018-10119 sot/source/sdstor/stgstrms.cxx in LibreOffice before 5.4.5.1 and 6.x b ... | CVSS3: 7.8 | 2% Низкий | больше 8 лет назад |
| CVE-2018-6871 LibreOffice before 5.4.5 and 6.x before 6.0.1 allows remote attackers to read arbitrary files via =WEBSERVICE calls in a document, which use the COM.MICROSOFT.WEBSERVICE function. | CVSS3: 9.8 | 23% Средний | почти 9 лет назад |
| CVE-2018-6871 LibreOffice before 5.4.5 and 6.x before 6.0.1 allows remote attackers to read arbitrary files via =WEBSERVICE calls in a document, which use the COM.MICROSOFT.WEBSERVICE function. | CVSS3: 4.7 | 23% Средний | больше 8 лет назад |
| CVE-2018-6871 LibreOffice before 5.4.5 and 6.x before 6.0.1 allows remote attackers to read arbitrary files via =WEBSERVICE calls in a document, which use the COM.MICROSOFT.WEBSERVICE function. | CVSS3: 9.8 | 23% Средний | почти 9 лет назад |
| CVE-2018-6871 LibreOffice before 5.4.5 and 6.x before 6.0.1 allows remote attackers ... | CVSS3: 9.8 | 23% Средний | почти 9 лет назад |
| GHSA-4wrw-jm7c-gf3x sot/source/sdstor/stgstrms.cxx in LibreOffice before 5.4.5.1 and 6.x before 6.0.1.1 uses an incorrect integer data type in the StgSmallStrm class, which allows remote attackers to cause a denial of service (use-after-free with write access) or possibly have unspecified other impact via a crafted document that uses the structured storage ole2 wrapper file format. | CVSS3: 7.8 | 2% Низкий | больше 4 лет назад |
 | BDU:2019-00715 Уязвимость функции SwCTBWrapper :: Read пакета офисных программ LibreOffice, позволяющая нарушителю выполнить произвольный код или вызвать отказ в обслуживании | CVSS3: 3.3 | 2% Низкий | больше 8 лет назад |
 | openSUSE-SU-2018:0446-1 Security update for libreoffice | 23% Средний | больше 8 лет назад | |
| SUSE-SU-2018:0443-1 Security update for libreoffice | 23% Средний | больше 8 лет назад | |
| SUSE-SU-2018:0428-1 Security update for libreoffice | 23% Средний | больше 8 лет назад | |
| GHSA-4xgr-65gv-68q9 LibreOffice before 5.4.5 and 6.x before 6.0.1 allows remote attackers to read arbitrary files via =WEBSERVICE calls in a document, which use the COM.MICROSOFT.WEBSERVICE function. | CVSS3: 9.8 | 23% Средний | больше 4 лет назад |
| ELSA-2018-0517 ELSA-2018-0517: libreoffice security update (MODERATE) | 23% Средний | больше 8 лет назад | |
| ELSA-2018-0418 ELSA-2018-0418: libreoffice security update (MODERATE) | 23% Средний | больше 8 лет назад | |
| BDU:2019-00714 Уязвимость компонента COM.MICROSOFT.WEBSERVICE пакета офисных программ LibreOffice, позволяющая нарушителю получить доступ к защищаемой информации | CVSS3: 5.5 | 23% Средний | почти 9 лет назад |
| openSUSE-SU-2018:1311-1 Security update for libreoffice | больше 8 лет назад | ||
| SUSE-SU-2018:1296-1 Security update for libreoffice | больше 8 лет назад |
Уязвимостей на страницу