The SwCTBWrapper::Read function in sw/source/filter/ww8/ww8toolbar.cxx in LibreOffice before 5.4.6.1 and 6.x before 6.0.2.1 does not validate a customizations index, which allows remote attackers to cause a denial of service (heap-based buffer overflow with write access) or possibly have unspecified other impact via a crafted document that contains a certain Microsoft Word record.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade libreoffice-langpack-euUpgrade libreoffice-langpack-bnUpgrade libreoffice-debuginfoUpgrade libreoffice-langpack-hrUpgrade autocorr-ptUpgrade autocorr-csUpgrade autocorr-faUpgrade autocorr-afUpgrade libreoffice-help-euUpgrade autocorr-slUpgrade libreoffice-sdkUpgrade libreoffice-pyunoUpgrade libreoffice-dataUpgrade libreoffice-langpack-frUpgrade autocorr-huUpgrade libreoffice-graphicfilterUpgrade libreoffice-langpack-bgUpgrade libreoffice-langpack-siUpgrade libreoffice-langpack-daUpgrade libreoffice-help-skUpgrade libreofficekit-develUpgrade libreoffice-ogltransUpgrade libreoffice-writerUpgrade libreoffice-langpack-zh-HansUpgrade autocorr-trUpgrade libreoffice-gladeUpgrade libreoffice-help-ruUpgrade libreoffice-langpack-asUpgrade libreoffice-langpack-tnUpgrade libreoffice-langpack-stUpgrade libreoffice-help-bnUpgrade autocorr-srUpgrade autocorr-ruUpgrade libreoffice-help-daUpgrade libreoffice-help-idUpgrade libreoffice-help-hrUpgrade autocorr-nlUpgrade libreoffice-officebeanUpgrade libreoffice-baseUpgrade libreoffice-langpack-zh-HantUpgrade autocorr-zhUpgrade libreofficekitUpgrade libreoffice-help-itUpgrade autocorr-plUpgrade libreoffice-gtk2Upgrade autocorr-svUpgrade libreoffice-x11Upgrade libreoffice-help-zh-HantUpgrade libreoffice-langpack-dzUpgrade libreoffice-langpack-tsUpgrade libreoffice-sdk-docUpgrade libreoffice-langpack-thUpgrade libreoffice-calcUpgrade libreoffice-opensymbol-fontsUpgrade libreoffice-langpack-taUpgrade libreoffice-langpack-nnUpgrade libreoffice-officebean-commonUpgrade libreoffice-langpack-xhUpgrade libreoffice-help-arUpgrade libreoffice-librelogoUpgrade libreoffice-impressUpgrade autocorr-hrUpgrade libreoffice-langpack-svUpgrade libreoffice-langpack-faUpgrade libreoffice-langpack-ukUpgrade libreoffice-help-lvUpgrade autocorr-skUpgrade libreoffice-langpack-csUpgrade libreoffice-mathUpgrade autocorr-viUpgrade libreoffice-help-heUpgrade autocorr-enUpgrade libreoffice-help-bgUpgrade libreoffice-langpack-mlUpgrade autocorr-jaUpgrade libreoffice-pdfimportUpgrade autocorr-isUpgrade libreoffice-langpack-idUpgrade libreoffice-langpack-pt-BRUpgrade autocorr-esUpgrade libreoffice-langpack-kkUpgrade libreoffice-help-frUpgrade libreoffice-help-fiUpgrade libreoffice-help-pt-BRUpgrade libreoffice-langpack-zuUpgrade libreoffice-langpack-nrUpgrade libreoffice-langpack-pt-PTUpgrade autocorr-caUpgrade libreoffice-langpack-paUpgrade libreoffice-langpack-jaUpgrade libreoffice-langpack-enUpgrade libreoffice-help-dzUpgrade libreoffice-langpack-lvUpgrade libreoffice-langpack-knUpgrade libreoffice-help-ltUpgrade libreoffice-help-nbUpgrade libreoffice-emailmergeUpgrade libreoffice-help-jaUpgrade libreoffice-nlpsolverUpgrade libreoffice-langpack-caUpgrade libreoffice-langpack-afUpgrade libreoffice-help-etUpgrade libreoffice-help-hiUpgrade libreoffice-langpack-ssUpgrade libreoffice-help-koUpgrade libreoffice-help-slUpgrade libreoffice-langpack-koUpgrade libreoffice-help-pt-PTUpgrade libreoffice-langpack-nsoUpgrade libreoffice-help-zh-HansUpgrade autocorr-koUpgrade libreoffice-langpack-guUpgrade libreoffice-help-huUpgrade libreoffice-help-siUpgrade libreoffice-langpack-fiUpgrade libreoffice-langpack-cyUpgrade libreoffice-help-csUpgrade libreoffice-langpack-trUpgrade libreoffice-langpack-esUpgrade libreoffice-langpack-skUpgrade libreoffice-langpack-srUpgrade libreoffice-xsltfilterUpgrade libreoffice-help-nlUpgrade libreoffice-langpack-heUpgrade libreoffice-help-taUpgrade libreoffice-help-roUpgrade libreoffice-langpack-veUpgrade libreoffice-help-elUpgrade libreoffice-gtk3Upgrade autocorr-roUpgrade libreoffice-langpack-orUpgrade libreoffice-drawUpgrade libreoffice-langpack-nlUpgrade libreoffice-help-trUpgrade libreoffice-wiki-publisherUpgrade libreoffice-langpack-maiUpgrade libreoffice-filtersUpgrade libreoffice-langpack-nbUpgrade libreoffice-help-svUpgrade libreoffice-help-glUpgrade libreoffice-help-guUpgrade libreoffice-help-esUpgrade libreoffice-help-nnUpgrade autocorr-frUpgrade autocorr-bgUpgrade libreoffice-coreUpgrade libreoffice-help-caUpgrade libreoffice-help-deUpgrade autocorr-deUpgrade libreoffice-langpack-hiUpgrade libreoffice-langpack-glUpgrade libreoffice-langpack-mrUpgrade autocorr-gaUpgrade libreoffice-langpack-elUpgrade libreoffice-langpack-roUpgrade libreoffice-langpack-ltUpgrade libreoffice-langpack-huUpgrade autocorr-lbUpgrade libreoffice-gdb-debug-supportUpgrade libreoffice-langpack-brUpgrade libreoffice-langpack-gaUpgrade autocorr-mnUpgrade libreoffice-langpack-slUpgrade libreoffice-langpack-etUpgrade libreoffice-langpack-deUpgrade autocorr-itUpgrade libreoffice-langpack-plUpgrade autocorr-fiUpgrade libreoffice-langpack-arUpgrade libreoffice-langpack-teUpgrade autocorr-ltUpgrade libreoffice-bshUpgrade libreoffice-langpack-itUpgrade libreoffice-help-ukUpgrade libreoffice-help-plUpgrade libreoffice-ure-commonUpgrade libreoffice-rhinoUpgrade libreoffice-postgresqlUpgrade libreoffice-langpack-ruUpgrade autocorr-daUpgrade libreofficeUpgrade libreoffice-ure | Aug 28, 2019 | Apr 16, 2018 |
| Debian | — | Upgrade libreoffice | Apr 21, 2018 | Apr 16, 2018 |
| Huawei Euleros 2_0_sp5 | — | Upgrade libreoffice-filtersUpgrade libreoffice-gtk3Upgrade autocorr-enUpgrade libreoffice-coreUpgrade libreoffice-ure-commonUpgrade libreoffice-ureUpgrade libreofficekitUpgrade libreoffice-dataUpgrade libreoffice-graphicfilterUpgrade libreoffice-calcUpgrade libreoffice-drawUpgrade libreoffice-opensymbol-fontsUpgrade libreoffice-pdfimportUpgrade libreoffice-pyunoUpgrade libreoffice-x11Upgrade libreoffice-impressUpgrade libreoffice-writerUpgrade libreoffice-gtk2Upgrade libreoffice-xsltfilterUpgrade libreoffice-mathUpgrade libreoffice-langpack-en | Dec 16, 2020 | Apr 16, 2018 |
| Redhat_linux | — | Upgrade libreoffice-langpack-slUpgrade libreoffice-langpack-zuUpgrade libreoffice-graphicfilterUpgrade libreoffice-help-etUpgrade libreoffice-langpack-nrUpgrade autocorr-svUpgrade libreoffice-help-bnUpgrade autocorr-daUpgrade autocorr-ruUpgrade libreoffice-writerUpgrade libreoffice-help-daUpgrade libreoffice-langpack-teUpgrade libreoffice-langpack-frUpgrade libreoffice-help-plUpgrade autocorr-srUpgrade autocorr-bgUpgrade libreoffice-help-dzUpgrade libreoffice-help-jaUpgrade autocorr-mnUpgrade libreoffice-help-hiUpgrade libreoffice-langpack-plUpgrade autocorr-ptUpgrade autocorr-huUpgrade libreoffice-langpack-bgUpgrade libreoffice-debuginfoUpgrade libreoffice-officebean-commonUpgrade libreoffice-langpack-afUpgrade autocorr-plUpgrade libreoffice-help-deUpgrade libreoffice-langpack-zh-HantUpgrade libreoffice-help-skUpgrade libreoffice-langpack-itUpgrade libreoffice-help-itUpgrade libreoffice-help-koUpgrade libreoffice-langpack-elUpgrade libreoffice-langpack-tnUpgrade libreoffice-langpack-dzUpgrade libreoffice-x11Upgrade autocorr-skUpgrade autocorr-gaUpgrade libreoffice-gdb-debug-supportUpgrade libreoffice-langpack-enUpgrade libreoffice-langpack-fiUpgrade libreoffice-langpack-euUpgrade libreoffice-officebeanUpgrade libreoffice-help-csUpgrade libreoffice-langpack-etUpgrade libreoffice-langpack-ruUpgrade libreoffice-help-fiUpgrade autocorr-csUpgrade libreoffice-langpack-siUpgrade libreoffice-help-idUpgrade libreoffice-pdfimportUpgrade libreoffice-langpack-nsoUpgrade libreoffice-help-ruUpgrade libreofficekit-develUpgrade libreofficekitUpgrade libreoffice-langpack-ltUpgrade libreoffice-help-pt-PTUpgrade libreoffice-calcUpgrade libreoffice-langpack-trUpgrade libreoffice-help-zh-HantUpgrade libreoffice-dataUpgrade libreoffice-nlpsolverUpgrade libreoffice-langpack-bnUpgrade autocorr-faUpgrade autocorr-hrUpgrade libreoffice-rhinoUpgrade libreoffice-langpack-esUpgrade libreoffice-help-euUpgrade libreoffice-pyunoUpgrade libreoffice-wiki-publisherUpgrade libreoffice-xsltfilterUpgrade libreoffice-help-pt-BRUpgrade libreoffice-langpack-nnUpgrade autocorr-fiUpgrade libreoffice-mathUpgrade libreoffice-langpack-svUpgrade libreoffice-help-nnUpgrade libreoffice-langpack-asUpgrade libreoffice-langpack-lvUpgrade libreoffice-langpack-roUpgrade libreoffice-help-ltUpgrade libreoffice-langpack-taUpgrade libreoffice-langpack-pt-BRUpgrade libreoffice-help-bgUpgrade libreoffice-langpack-csUpgrade autocorr-trUpgrade libreoffice-baseUpgrade libreoffice-langpack-ssUpgrade libreoffice-langpack-brUpgrade libreoffice-langpack-hrUpgrade libreoffice-postgresqlUpgrade autocorr-afUpgrade autocorr-viUpgrade libreoffice-bshUpgrade libreoffice-langpack-ukUpgrade libreoffice-gladeUpgrade libreoffice-langpack-tsUpgrade libreoffice-ure-commonUpgrade autocorr-slUpgrade libreoffice-langpack-stUpgrade autocorr-frUpgrade libreoffice-help-lvUpgrade libreoffice-langpack-cyUpgrade libreoffice-sdkUpgrade libreoffice-help-glUpgrade libreoffice-langpack-pt-PTUpgrade libreoffice-help-heUpgrade libreoffice-help-svUpgrade autocorr-nlUpgrade libreoffice-langpack-zh-HansUpgrade libreoffice-help-hrUpgrade libreoffice-help-frUpgrade autocorr-ltNo solution existsUpgrade autocorr-caUpgrade libreoffice-help-ukUpgrade autocorr-zhUpgrade libreoffice-help-slUpgrade libreoffice-drawUpgrade libreoffice-langpack-huUpgrade libreoffice-langpack-skUpgrade autocorr-isUpgrade autocorr-itUpgrade autocorr-roUpgrade libreoffice-help-arUpgrade libreoffice-impressUpgrade libreoffice-langpack-maiUpgrade libreoffice-langpack-orUpgrade libreoffice-langpack-daUpgrade libreoffice-langpack-heUpgrade libreofficeUpgrade libreoffice-langpack-arUpgrade autocorr-koUpgrade libreoffice-sdk-docUpgrade libreoffice-langpack-xhUpgrade libreoffice-langpack-idUpgrade libreoffice-langpack-hiUpgrade libreoffice-ureUpgrade autocorr-deUpgrade autocorr-esUpgrade autocorr-enUpgrade libreoffice-langpack-kkUpgrade libreoffice-langpack-thUpgrade libreoffice-langpack-jaUpgrade libreoffice-help-siUpgrade libreoffice-langpack-caUpgrade libreoffice-langpack-guUpgrade libreoffice-emailmergeUpgrade libreoffice-help-nlUpgrade libreoffice-help-trUpgrade libreoffice-langpack-faUpgrade libreoffice-help-guUpgrade autocorr-jaUpgrade libreoffice-langpack-deUpgrade libreoffice-filtersUpgrade libreoffice-gtk3Upgrade libreoffice-help-zh-HansUpgrade autocorr-lbUpgrade libreoffice-langpack-srUpgrade libreoffice-help-taUpgrade libreoffice-help-nbUpgrade libreoffice-langpack-paUpgrade libreoffice-help-roUpgrade libreoffice-langpack-knUpgrade libreoffice-gtk2Upgrade libreoffice-langpack-nbUpgrade libreoffice-langpack-mrUpgrade libreoffice-langpack-veUpgrade libreoffice-help-caUpgrade libreoffice-help-elUpgrade libreoffice-langpack-glUpgrade libreoffice-langpack-nlUpgrade libreoffice-help-huUpgrade libreoffice-langpack-koUpgrade libreoffice-coreUpgrade libreoffice-librelogoUpgrade libreoffice-langpack-mlUpgrade libreoffice-opensymbol-fontsUpgrade libreoffice-langpack-gaUpgrade libreoffice-ogltransUpgrade libreoffice-help-es | Oct 31, 2018 | Apr 16, 2018 |
| Suse | — | Upgrade libreoffice-l10n-zuUpgrade libreoffice-mathUpgrade libreoffice-l10n-asUpgrade libreoffice-l10n-ocUpgrade libreoffice-l10n-viUpgrade libreoffice-l10n-daUpgrade libreoffice-l10n-lbUpgrade libreoffice-l10n-astUpgrade libreoffice-pyunoUpgrade libreoffice-gtk2Upgrade libreoffice-l10n-koUpgrade libreoffice-l10n-thUpgrade libreoffice-l10n-ckbUpgrade libreoffice-l10n-sdUpgrade libreoffice-l10n-siUpgrade libreoffice-writerUpgrade libreoffice-filters-optionalUpgrade libreoffice-l10n-ksUpgrade libreoffice-l10n-srUpgrade libreoffice-gnomeUpgrade libreoffice-l10n-zh_TWUpgrade libreoffice-l10n-taUpgrade libreoffice-calc-extensionsUpgrade libreoffice-l10n-arUpgrade libreoffice-l10n-mnUpgrade libreoffice-l10n-stUpgrade libreoffice-l10n-ltUpgrade libreoffice-l10n-tsUpgrade libreoffice-l10n-amUpgrade libreoffice-l10n-hiUpgrade libreoffice-l10n-zh_CNUpgrade libreoffice-l10n-pt_BRUpgrade libreoffice-l10n-etUpgrade libreoffice-l10n-afUpgrade libreoffice-l10n-bnUpgrade libreoffice-l10n-dzUpgrade libreoffice-l10n-ruUpgrade libreoffice-l10n-tnUpgrade libreoffice-base-drivers-mysqlUpgrade libreoffice-l10n-nsoUpgrade libreoffice-l10n-knUpgrade libreoffice-l10n-bn_inUpgrade libreoffice-l10n-kkUpgrade libreoffice-l10n-trUpgrade libreoffice-l10n-kmr_latnUpgrade libreofficeUpgrade libreoffice-l10n-sa_inUpgrade libreoffice-l10n-omUpgrade libreoffice-impressUpgrade libreoffice-l10n-idUpgrade libreoffice-officebeanUpgrade libreoffice-l10n-sidUpgrade libreoffice-l10n-nlUpgrade libreoffice-kde4Upgrade libreoffice-sdkUpgrade libreoffice-l10n-sqUpgrade libreoffice-l10n-brxUpgrade libreoffice-l10n-ssUpgrade libreofficekit-develUpgrade libreoffice-l10n-elUpgrade libreoffice-l10n-gaUpgrade libreoffice-l10n-esUpgrade libreoffice-l10n-fyUpgrade libreoffice-l10n-mrUpgrade libreoffice-l10n-deUpgrade libreoffice-l10n-maiUpgrade libreoffice-drawUpgrade libreoffice-l10n-gdUpgrade libreoffice-gtk3Upgrade libreoffice-writer-extensionsUpgrade libreoffice-l10n-beUpgrade libreoffice-l10n-dsbUpgrade libreoffice-l10n-eoUpgrade libreoffice-l10n-huUpgrade libreoffice-l10n-en_gbUpgrade libreoffice-l10n-ttUpgrade libreoffice-l10n-caUpgrade libreoffice-l10n-nrUpgrade libreoffice-l10n-heUpgrade libreoffice-l10n-roUpgrade libreoffice-l10n-paUpgrade libreoffice-l10n-neUpgrade libreoffice-l10n-brUpgrade libreoffice-sdk-docUpgrade libreoffice-baseUpgrade libreoffice-l10n-rwUpgrade libreoffice-l10n-skUpgrade libreoffice-l10n-loUpgrade libreoffice-l10n-kabUpgrade libreoffice-base-drivers-postgresqlUpgrade libreoffice-l10n-nbUpgrade libreoffice-l10n-guUpgrade libreoffice-l10n-sw_tzUpgrade libreoffice-l10n-mkUpgrade libreoffice-l10n-orUpgrade libreoffice-l10n-itUpgrade libreofficekitUpgrade libreoffice-l10n-fiUpgrade libreoffice-l10n-teUpgrade libreoffice-l10n-svUpgrade libreoffice-l10n-frUpgrade libreoffice-l10n-myUpgrade libreoffice-l10n-csUpgrade libreoffice-l10n-hrUpgrade libreoffice-l10n-hsbUpgrade libreoffice-l10n-satUpgrade libreoffice-qt5Upgrade libreoffice-l10n-ugUpgrade libreoffice-l10n-bgUpgrade libreoffice-l10n-mlUpgrade libreoffice-l10n-ukUpgrade libreoffice-l10n-vecUpgrade libreoffice-l10n-slUpgrade libreoffice-gladeUpgrade libreoffice-l10n-enUpgrade libreoffice-l10n-tgUpgrade libreoffice-calcUpgrade libreoffice-l10n-plUpgrade libreoffice-l10n-lvUpgrade libreoffice-l10n-euUpgrade libreoffice-l10n-kokUpgrade libreoffice-l10n-xhUpgrade libreoffice-librelogoUpgrade libreoffice-l10n-faUpgrade libreoffice-l10n-nnUpgrade libreoffice-l10n-en_zaUpgrade libreoffice-l10n-uzUpgrade libreoffice-l10n-cyUpgrade libreoffice-l10n-ca_valenciaUpgrade libreoffice-l10n-isUpgrade libreoffice-mailmergeUpgrade libreoffice-l10n-gugUpgrade libreoffice-l10n-furUpgrade libreoffice-l10n-mniUpgrade libreoffice-l10n-veUpgrade libreoffice-gdb-pretty-printersUpgrade libreoffice-branding-upstreamUpgrade libreoffice-l10n-pt_PTUpgrade libreoffice-l10n-kaUpgrade libreoffice-l10n-jaUpgrade libreoffice-icon-themesUpgrade libreoffice-l10n-dgoUpgrade libreoffice-l10n-szlUpgrade libreoffice-l10n-glUpgrade libreoffice-l10n-boUpgrade libreoffice-l10n-kmUpgrade libreoffice-l10n-bs | May 16, 2018 | Apr 16, 2018 |
| Ubuntu | — | Upgrade libreoffice-core | Feb 14, 2019 | Apr 16, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub