Document Liberation Project libmwaw before 2017-04-08 has an out-of-bounds write caused by a heap-based buffer overflow related to the MsWrd1Parser::readFootnoteCorrespondance function in lib/MsWrd1Parser.cxx.
CVSS Details
- CVSS 3.0 Base Score: 9.8
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade libmwaw | Jun 11, 2017 | Jun 4, 2017 |
| Huawei Euleros 2_0_sp5 | — | Upgrade libmwaw | Dec 11, 2019 | Jun 5, 2017 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Apr 8, 2017 |
| Suse | — | Upgrade myspell-arUpgrade myspell-en_INUpgrade libboost_system1_54_0Upgrade myspell-nn_NOUpgrade myspell-ar_OMUpgrade myspell-ca_ADUpgrade libboost_thread1_54_0Upgrade myspell-lt_LTUpgrade myspell-lightproof-pt_BRUpgrade myspell-lv_LVUpgrade myspell-fr_BEUpgrade myspell-uk_UAUpgrade libreoffice-l10n-nnUpgrade myspell-en_CAUpgrade libboost_timer1_54_0Upgrade libboost_filesystem1_54_0Upgrade boost-license1_54_0Upgrade myspell-sr_Latn_RSUpgrade myspell-es_DOUpgrade libreoffice-icon-themesUpgrade myspell-af_ZAUpgrade libixion-0_13-0Upgrade libboost_graph1_54_0Upgrade libreoffice-officebeanUpgrade libreoffice-l10n-zh_cnUpgrade libepubgen-develUpgrade myspell-es_GTUpgrade libreoffice-l10n-fiUpgrade myspell-esUpgrade myspell-es_UYUpgrade myspell-dictionariesUpgrade myspell-es_CRUpgrade libboost_regex1_54_0Upgrade libboost_atomic1_54_0Upgrade myspell-es_ECUpgrade myspell-ar_YEUpgrade myspell-ca_ESUpgrade myspell-es_NIUpgrade libreoffice-base-drivers-mysqlUpgrade myspell-ar_SAUpgrade libreoffice-l10n-nlUpgrade libreoffice-l10n-bgUpgrade gnome-documents-langUpgrade libreoffice-l10n-zh_twUpgrade myspell-es_HNUpgrade myspell-ar_SDUpgrade myspell-es_ARUpgrade myspell-roUpgrade myspell-ar_KWUpgrade myspell-ar_DZUpgrade myspell-el_GRUpgrade libzmf-0_0-0Upgrade libepubgen-0_1-1Upgrade myspell-en_MWUpgrade myspell-bs_BAUpgrade myspell-ar_LBUpgrade myspell-caUpgrade myspell-hi_INUpgrade myspell-en_IEUpgrade libreoffice-l10n-frUpgrade myspell-ar_LYUpgrade libixion-0_12-0Upgrade liborcus-0_13-0Upgrade libboost_math1_54_0Upgrade libreoffice-l10n-nbUpgrade libreoffice-calcUpgrade myspell-sr_CSUpgrade myspell-ru_RUUpgrade libwps-develUpgrade myspell-de_DEUpgrade libboost_test1_54_0Upgrade libreoffice-l10n-ukUpgrade myspell-pt_PTUpgrade libreoffice-l10n-csUpgrade libboost_chrono1_54_0Upgrade libreoffice-l10n-pt_ptUpgrade libreoffice-l10n-pt_brUpgrade boost-develUpgrade libqxp-0_0-0Upgrade myspell-viUpgrade myspell-zu_ZAUpgrade myspell-ar_JOUpgrade myspell-th_THUpgrade libreofficeUpgrade myspell-pt_BRUpgrade myspell-en_BSUpgrade myspell-fr_LUUpgrade myspell-es_COUpgrade myspell-srUpgrade myspell-ar_EGUpgrade libreoffice-l10n-guUpgrade myspell-fr_CHUpgrade libqxp-toolsUpgrade myspell-es_SVUpgrade myspell-en_TTUpgrade libreoffice-mailmergeUpgrade libstaroffice-0_0-0Upgrade libboost_python1_54_0Upgrade libreoffice-l10n-caUpgrade libboost_serialization1_54_0Upgrade libreoffice-l10n-roUpgrade myspell-ca_ES_valenciaUpgrade myspell-sk_SKUpgrade myspell-ar_IQUpgrade myspell-it_ITUpgrade gnome-documents_books-commonUpgrade myspell-es_CLUpgrade myspell-he_ILUpgrade libreoffice-l10n-jaUpgrade myspell-enUpgrade myspell-bn_BDUpgrade libboost_iostreams1_54_0Upgrade myspell-noUpgrade myspell-sl_SIUpgrade myspell-te_INUpgrade myspell-nl_BEUpgrade libboost_context1_54_0Upgrade libreoffice-l10n-xhUpgrade myspell-lightproof-enUpgrade libreoffice-l10n-enUpgrade myspell-en_BZUpgrade libreofficekitUpgrade libboost_mpi1_54_0Upgrade libboost_program_options1_54_0Upgrade myspell-da_DKUpgrade myspell-de_CHUpgrade myspell-es_PEUpgrade myspell-vi_VNUpgrade myspell-lo_LAUpgrade myspell-cs_CZUpgrade myspell-es_VEUpgrade myspell-es_ESUpgrade myspell-ar_AEUpgrade libreoffice-l10n-plUpgrade libboost_log1_54_0Upgrade libreoffice-l10n-afUpgrade libmwaw-devel-docUpgrade libreoffice-impressUpgrade libreoffice-pyunoUpgrade myspell-pt_AOUpgrade myspell-pl_PLUpgrade myspell-en_USUpgrade myspell-lightproof-hu_HUUpgrade myspell-fr_CAUpgrade myspell-sv_FIUpgrade myspell-nb_NOUpgrade libreoffice-l10n-itUpgrade libreoffice-writerUpgrade myspell-deUpgrade myspell-ar_MAUpgrade libreoffice-gtk2Upgrade myspell-es_PRUpgrade libreoffice-l10n-hiUpgrade libboost_random1_54_0Upgrade libboost_date_time1_54_0Upgrade libmwaw-toolsUpgrade libreoffice-l10n-ruUpgrade libmwaw-0_3-3Upgrade libreoffice-l10n-skUpgrade myspell-fr_MCUpgrade myspell-sr_RSUpgrade libreoffice-icon-theme-tangoUpgrade myspell-fr_FRUpgrade myspell-de_ATUpgrade myspell-bn_INUpgrade libreoffice-l10n-svUpgrade myspell-bg_BGUpgrade libreoffice-branding-upstreamUpgrade myspell-id_IDUpgrade liborcus-develUpgrade libreoffice-l10n-koUpgrade myspell-en_ZAUpgrade libixion-develUpgrade myspell-en_GHUpgrade libreoffice-l10n-arUpgrade gnome-shell-search-provider-documentsUpgrade myspell-hr_HRUpgrade libreoffice-l10n-daUpgrade libmwaw-develUpgrade myspell-af_NAUpgrade myspell-es_PYUpgrade myspell-es_CUUpgrade libreoffice-base-drivers-postgresqlUpgrade gnome-documentsUpgrade libreoffice-filters-optionalUpgrade myspell-be_BYUpgrade libreoffice-calc-extensionsUpgrade myspell-en_JMUpgrade myspell-sr_Latn_CSUpgrade libreoffice-sdkUpgrade myspell-en_NAUpgrade libreoffice-l10n-zuUpgrade libreoffice-baseUpgrade myspell-en_PHUpgrade myspell-es_MXUpgrade myspell-es_PAUpgrade myspell-ar_TNUpgrade myspell-en_GBUpgrade libqxp-docUpgrade libboost_graph_parallel1_54_0Upgrade myspell-nl_NLUpgrade libreoffice-writer-extensionsUpgrade libreoffice-l10n-huUpgrade myspell-teUpgrade myspell-lightproof-ru_RUUpgrade libreoffice-l10n-ltUpgrade libreoffice-l10n-esUpgrade libreoffice-icon-theme-galaxyUpgrade myspell-ar_QAUpgrade libboost_wave1_54_0Upgrade myspell-ar_SYUpgrade libwps-0_4-4Upgrade myspell-ro_ROUpgrade libqxp-develUpgrade myspell-ca_ITUpgrade myspell-bsUpgrade liborcus-0_12-0Upgrade myspell-es_BOUpgrade myspell-ar_BHUpgrade myspell-en_ZWUpgrade libreoffice-l10n-deUpgrade myspell-hu_HUUpgrade libboost_signals1_54_0Upgrade libboost_locale1_54_0Upgrade libreoffice-gnomeUpgrade libreoffice-drawUpgrade libreoffice-l10n-hrUpgrade myspell-idUpgrade myspell-et_EEUpgrade myspell-en_AUUpgrade libreoffice-mathUpgrade myspell-ca_FRUpgrade myspell-sv_SEUpgrade myspell-gu_INUpgrade myspell-en_NZ | Jul 8, 2017 | Jun 4, 2017 |
| Ubuntu | — | Upgrade libmwaw-0.3-3Upgrade libmwaw-0.1-1 | Jun 16, 2017 | Jun 4, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub