Document Liberation Project libmwaw before 2017-04-08 has an out-of-bounds write caused by a heap-based buffer overflow related to the MsWrd1Parser::readFootnoteCorrespondance function in lib/MsWrd1Parser.cxx.
CVSS Details
- CVSS 3.0 Base Score: 9.8
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade libmwaw | Jun 11, 2017 | Jun 4, 2017 |
| Huawei Euleros 2_0_sp5 | — | Upgrade libmwaw | Dec 11, 2019 | Jun 5, 2017 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Apr 8, 2017 |
| Suse | — | Upgrade libreoffice-l10n-bgUpgrade myspell-en_MWUpgrade libreoffice-l10n-jaUpgrade myspell-ar_LYUpgrade libreoffice-l10n-pt_PTUpgrade myspell-en_IEUpgrade libreoffice-l10n-plUpgrade myspell-ar_AEUpgrade libreoffice-l10n-roUpgrade myspell-cs_CZUpgrade libreoffice-base-drivers-mysqlUpgrade myspell-nn_NOUpgrade myspell-es_UYUpgrade libreoffice-l10n-fiUpgrade myspell-esUpgrade libboost_graph1_54_0Upgrade myspell-es_CRUpgrade myspell-sr_Latn_RSUpgrade libboost_regex1_54_0Upgrade myspell-lt_LTUpgrade libepubgen-develUpgrade myspell-noUpgrade libboost_program_options1_54_0Upgrade myspell-lightproof-pt_BRUpgrade myspell-de_CHUpgrade myspell-es_COUpgrade myspell-fr_LUUpgrade myspell-ru_RUUpgrade myspell-lv_LVUpgrade myspell-pt_BRUpgrade libreoffice-l10n-nbUpgrade myspell-vi_VNUpgrade myspell-bn_BDUpgrade libixion-0_13-0Upgrade myspell-en_BZUpgrade libreofficekitUpgrade myspell-he_ILUpgrade libboost_thread1_54_0Upgrade myspell-ar_OMUpgrade myspell-te_INUpgrade myspell-sl_SIUpgrade libboost_timer1_54_0Upgrade myspell-srUpgrade myspell-af_ZAUpgrade myspell-en_TTUpgrade myspell-es_GTUpgrade myspell-fr_BEUpgrade libreoffice-mailmergeUpgrade myspell-ar_SAUpgrade myspell-ar_KWUpgrade libzmf-0_0-0Upgrade myspell-ar_EGUpgrade libboost_iostreams1_54_0Upgrade gnome-documents_books-commonUpgrade myspell-es_VEUpgrade libreoffice-l10n-nnUpgrade myspell-hi_INUpgrade libreoffice-l10n-nlUpgrade libreoffice-officebeanUpgrade myspell-ar_DZUpgrade myspell-en_CAUpgrade myspell-es_HNUpgrade myspell-roUpgrade myspell-el_GRUpgrade myspell-sr_CSUpgrade myspell-viUpgrade myspell-ar_JOUpgrade myspell-zu_ZAUpgrade libreoffice-l10n-guUpgrade libreoffice-l10n-ukUpgrade myspell-es_PEUpgrade myspell-lo_LAUpgrade libboost_atomic1_54_0Upgrade libreoffice-l10n-caUpgrade myspell-dictionariesUpgrade libboost_serialization1_54_0Upgrade myspell-uk_UAUpgrade libboost_filesystem1_54_0Upgrade libboost_mpi1_54_0Upgrade myspell-arUpgrade myspell-bs_BAUpgrade myspell-sk_SKUpgrade myspell-es_ESUpgrade gnome-documents-langUpgrade myspell-es_ECUpgrade libstaroffice-0_0-0Upgrade myspell-da_DKUpgrade myspell-ca_ES_valenciaUpgrade libboost_python1_54_0Upgrade myspell-caUpgrade libreoffice-calcUpgrade myspell-enUpgrade libepubgen-0_1-1Upgrade myspell-nl_BEUpgrade myspell-es_DOUpgrade myspell-fr_CHUpgrade libreoffice-icon-themesUpgrade libboost_system1_54_0Upgrade boost-license1_54_0Upgrade myspell-en_INUpgrade libreofficeUpgrade myspell-ca_ADUpgrade libreoffice-l10n-xhUpgrade liborcus-0_13-0Upgrade libreoffice-l10n-frUpgrade myspell-pt_PTUpgrade libreoffice-l10n-enUpgrade myspell-en_BSUpgrade libboost_math1_54_0Upgrade myspell-ar_LBUpgrade myspell-it_ITUpgrade libqxp-toolsUpgrade boost-develUpgrade libixion-0_12-0Upgrade libboost_context1_54_0Upgrade myspell-lightproof-enUpgrade myspell-ar_IQUpgrade libwps-develUpgrade myspell-es_CLUpgrade myspell-es_ARUpgrade libqxp-0_0-0Upgrade libboost_chrono1_54_0Upgrade myspell-th_THUpgrade myspell-es_SVUpgrade libreoffice-l10n-csUpgrade myspell-es_NIUpgrade myspell-ar_YEUpgrade libboost_test1_54_0Upgrade myspell-de_DEUpgrade myspell-ca_ESUpgrade myspell-ar_SDUpgrade myspell-ro_ROUpgrade myspell-lightproof-hu_HUUpgrade libboost_wave1_54_0Upgrade libreoffice-mathUpgrade liborcus-0_12-0Upgrade libreoffice-l10n-koUpgrade myspell-en_ZAUpgrade myspell-bsUpgrade myspell-es_BOUpgrade libreoffice-filters-optionalUpgrade libreoffice-l10n-pt_BRUpgrade myspell-bn_INUpgrade myspell-hu_HUUpgrade libboost_signals1_54_0Upgrade libreoffice-drawUpgrade myspell-fr_FRUpgrade libreoffice-gnomeUpgrade libreoffice-calc-extensionsUpgrade myspell-ar_MAUpgrade myspell-fr_CAUpgrade myspell-sr_Latn_CSUpgrade libreoffice-gtk2Upgrade libreoffice-l10n-hiUpgrade libreoffice-l10n-deUpgrade libqxp-develUpgrade libreoffice-l10n-afUpgrade myspell-ca_ITUpgrade liborcus-develUpgrade myspell-en_ZWUpgrade myspell-es_PYUpgrade libreoffice-icon-theme-tangoUpgrade myspell-es_PAUpgrade libreoffice-l10n-zh_TWUpgrade libboost_graph_parallel1_54_0Upgrade myspell-en_GBUpgrade libqxp-docUpgrade libreoffice-l10n-daUpgrade libmwaw-develUpgrade myspell-idUpgrade myspell-et_EEUpgrade libreoffice-l10n-zuUpgrade myspell-af_NAUpgrade libreoffice-l10n-skUpgrade myspell-id_IDUpgrade libreoffice-l10n-esUpgrade myspell-en_NAUpgrade libreoffice-writerUpgrade libixion-develUpgrade libreoffice-l10n-arUpgrade myspell-ar_SYUpgrade myspell-teUpgrade libreoffice-icon-theme-galaxyUpgrade myspell-lightproof-ru_RUUpgrade libwps-0_4-4Upgrade libreoffice-l10n-ltUpgrade myspell-en_GHUpgrade libreoffice-l10n-huUpgrade myspell-ar_QAUpgrade libreoffice-writer-extensionsUpgrade myspell-fr_MCUpgrade myspell-es_PRUpgrade libreoffice-l10n-zh_CNUpgrade libmwaw-0_3-3Upgrade libboost_random1_54_0Upgrade libmwaw-toolsUpgrade myspell-deUpgrade libreoffice-l10n-ruUpgrade myspell-pt_AOUpgrade myspell-gu_INUpgrade myspell-hr_HRUpgrade myspell-sv_SEUpgrade myspell-en_AUUpgrade libboost_log1_54_0Upgrade libreoffice-l10n-hrUpgrade myspell-bg_BGUpgrade myspell-de_ATUpgrade myspell-sr_RSUpgrade libreoffice-l10n-svUpgrade libreoffice-branding-upstreamUpgrade myspell-ar_BHUpgrade libboost_date_time1_54_0Upgrade myspell-nl_NLUpgrade libreoffice-l10n-itUpgrade gnome-shell-search-provider-documentsUpgrade libreoffice-base-drivers-postgresqlUpgrade myspell-ca_FRUpgrade myspell-en_NZUpgrade myspell-en_PHUpgrade libreoffice-pyunoUpgrade libreoffice-baseUpgrade libmwaw-devel-docUpgrade libreoffice-impressUpgrade libreoffice-sdkUpgrade myspell-pl_PLUpgrade myspell-nb_NOUpgrade myspell-en_JMUpgrade myspell-sv_FIUpgrade myspell-be_BYUpgrade libboost_locale1_54_0Upgrade myspell-en_USUpgrade myspell-es_MXUpgrade myspell-es_CUUpgrade myspell-ar_TNUpgrade gnome-documents | Jul 8, 2017 | Jun 4, 2017 |
| Ubuntu | — | Upgrade libmwaw-0.1-1Upgrade libmwaw-0.3-3 | Jun 16, 2017 | Jun 4, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub