The SwCTBWrapper::Read function in sw/source/filter/ww8/ww8toolbar.cxx in LibreOffice before 5.4.6.1 and 6.x before 6.0.2.1 does not validate a customizations index, which allows remote attackers to cause a denial of service (heap-based buffer overflow with write access) or possibly have unspecified other impact via a crafted document that contains a certain Microsoft Word record.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade libreoffice-help-ltUpgrade libreoffice-postgresqlUpgrade libreoffice-help-jaUpgrade libreoffice-langpack-teUpgrade libreoffice-langpack-nrUpgrade libreoffice-help-caUpgrade libreoffice-langpack-nbUpgrade libreoffice-rhinoUpgrade libreoffice-langpack-nlUpgrade libreoffice-langpack-hiUpgrade libreoffice-langpack-elUpgrade libreoffice-langpack-glUpgrade libreoffice-langpack-ltUpgrade libreoffice-langpack-ssUpgrade libreoffice-langpack-roUpgrade libreoffice-help-deUpgrade autocorr-gaUpgrade autocorr-deUpgrade libreoffice-langpack-mrUpgrade libreoffice-help-esUpgrade libreoffice-help-elUpgrade autocorr-itUpgrade autocorr-lbUpgrade libreoffice-wiki-publisherUpgrade libreoffice-drawUpgrade libreoffice-langpack-orUpgrade libreoffice-langpack-maiUpgrade libreoffice-langpack-lvUpgrade libreoffice-langpack-pt-PTUpgrade libreoffice-langpack-caUpgrade libreoffice-help-koUpgrade libreoffice-langpack-knUpgrade libreoffice-help-roUpgrade libreoffice-nlpsolverUpgrade libreoffice-help-glUpgrade libreoffice-langpack-afUpgrade libreoffice-help-nnUpgrade libreoffice-help-pt-PTUpgrade libreoffice-help-trUpgrade autocorr-mnUpgrade libreoffice-langpack-guUpgrade libreoffice-langpack-deUpgrade libreoffice-help-nbUpgrade libreoffice-langpack-huUpgrade libreoffice-langpack-skUpgrade libreoffice-help-pt-BRUpgrade libreoffice-langpack-veUpgrade libreoffice-langpack-srUpgrade libreoffice-langpack-esUpgrade libreoffice-langpack-trUpgrade autocorr-caUpgrade libreoffice-help-nlUpgrade libreoffice-xsltfilterUpgrade libreoffice-langpack-fiUpgrade libreoffice-bshUpgrade libreoffice-help-zh-HansUpgrade libreoffice-help-slUpgrade autocorr-bgUpgrade libreoffice-ure-commonUpgrade autocorr-roUpgrade libreoffice-langpack-itUpgrade libreoffice-gtk3Upgrade libreoffice-coreUpgrade autocorr-koUpgrade libreoffice-langpack-jaUpgrade libreoffice-langpack-slUpgrade libreoffice-help-huUpgrade libreoffice-help-etUpgrade libreoffice-help-csUpgrade libreoffice-langpack-cyUpgrade libreoffice-help-svUpgrade autocorr-daUpgrade libreoffice-help-guUpgrade libreoffice-emailmergeUpgrade libreoffice-help-hiUpgrade libreofficeUpgrade autocorr-fiUpgrade libreoffice-help-siUpgrade libreoffice-langpack-koUpgrade libreoffice-langpack-enUpgrade autocorr-frUpgrade libreoffice-langpack-nsoUpgrade libreoffice-langpack-ruUpgrade libreoffice-langpack-heUpgrade libreoffice-langpack-plUpgrade libreoffice-help-taUpgrade libreoffice-help-dzUpgrade libreoffice-langpack-arUpgrade libreoffice-ureUpgrade libreoffice-langpack-paUpgrade libreoffice-langpack-brUpgrade libreoffice-langpack-zuUpgrade libreoffice-help-fiUpgrade libreoffice-langpack-gaUpgrade libreoffice-filtersUpgrade libreoffice-help-plUpgrade libreoffice-langpack-etUpgrade autocorr-ltUpgrade libreoffice-gdb-debug-supportUpgrade libreoffice-help-ukUpgrade autocorr-hrUpgrade libreoffice-help-heUpgrade libreoffice-help-skUpgrade libreoffice-pdfimportUpgrade libreoffice-langpack-stUpgrade libreoffice-langpack-svUpgrade libreoffice-langpack-xhUpgrade autocorr-trUpgrade libreoffice-dataUpgrade libreoffice-graphicfilterUpgrade libreoffice-help-hrUpgrade libreoffice-langpack-ukUpgrade libreoffice-opensymbol-fontsUpgrade libreoffice-langpack-dzUpgrade libreoffice-langpack-tsUpgrade libreoffice-sdkUpgrade autocorr-ptUpgrade libreoffice-langpack-frUpgrade libreoffice-langpack-pt-BRUpgrade libreoffice-impressUpgrade libreoffice-help-arUpgrade autocorr-huUpgrade libreoffice-langpack-daUpgrade libreoffice-help-zh-HantUpgrade libreoffice-langpack-bgUpgrade libreoffice-pyunoUpgrade libreoffice-langpack-hrUpgrade autocorr-afUpgrade libreoffice-debuginfoUpgrade autocorr-slUpgrade libreoffice-help-euUpgrade libreoffice-langpack-csUpgrade libreoffice-langpack-siUpgrade libreoffice-langpack-thUpgrade libreoffice-langpack-tnUpgrade libreoffice-langpack-asUpgrade libreoffice-writerUpgrade libreoffice-help-bnUpgrade libreoffice-gladeUpgrade libreoffice-ogltransUpgrade libreoffice-langpack-nnUpgrade libreoffice-langpack-euUpgrade libreoffice-langpack-bnUpgrade autocorr-svUpgrade libreoffice-help-bgUpgrade autocorr-faUpgrade libreofficekitUpgrade autocorr-ruUpgrade autocorr-zhUpgrade libreoffice-langpack-zh-HantUpgrade autocorr-nlUpgrade libreoffice-baseUpgrade libreoffice-help-itUpgrade autocorr-srUpgrade libreoffice-langpack-taUpgrade libreoffice-officebeanUpgrade autocorr-isUpgrade libreoffice-help-ruUpgrade autocorr-plUpgrade autocorr-viUpgrade libreoffice-mathUpgrade autocorr-skUpgrade libreoffice-librelogoUpgrade libreoffice-langpack-faUpgrade libreoffice-officebean-commonUpgrade autocorr-jaUpgrade autocorr-esUpgrade autocorr-enUpgrade libreoffice-langpack-mlUpgrade libreoffice-langpack-idUpgrade autocorr-csUpgrade libreoffice-help-frUpgrade libreoffice-help-idUpgrade libreofficekit-develUpgrade libreoffice-help-daUpgrade libreoffice-sdk-docUpgrade libreoffice-langpack-kkUpgrade libreoffice-langpack-zh-HansUpgrade libreoffice-x11Upgrade libreoffice-gtk2Upgrade libreoffice-help-lvUpgrade libreoffice-calc | Aug 28, 2019 | Apr 16, 2018 |
| Debian | — | Upgrade libreoffice | Apr 21, 2018 | Apr 16, 2018 |
| Huawei Euleros 2_0_sp5 | — | Upgrade libreoffice-ureUpgrade libreoffice-ure-commonUpgrade libreoffice-filtersUpgrade libreoffice-gtk3Upgrade libreoffice-calcUpgrade libreofficekitUpgrade libreoffice-graphicfilterUpgrade libreoffice-drawUpgrade libreoffice-opensymbol-fontsUpgrade libreoffice-dataUpgrade autocorr-enUpgrade libreoffice-coreUpgrade libreoffice-xsltfilterUpgrade libreoffice-langpack-enUpgrade libreoffice-mathUpgrade libreoffice-pyunoUpgrade libreoffice-x11Upgrade libreoffice-impressUpgrade libreoffice-gtk2Upgrade libreoffice-pdfimportUpgrade libreoffice-writer | Dec 16, 2020 | Apr 16, 2018 |
| Redhat_linux | — | Upgrade libreoffice-mathUpgrade libreoffice-langpack-ruUpgrade libreoffice-langpack-ltUpgrade libreoffice-langpack-etUpgrade libreoffice-langpack-hrUpgrade libreoffice-help-csUpgrade libreoffice-langpack-nnUpgrade autocorr-huUpgrade libreoffice-langpack-siUpgrade autocorr-skUpgrade libreofficekitUpgrade libreoffice-officebeanUpgrade libreoffice-calcUpgrade libreoffice-help-koUpgrade autocorr-fiUpgrade autocorr-gaUpgrade libreoffice-help-zh-HantUpgrade libreoffice-help-itUpgrade autocorr-mnUpgrade autocorr-plUpgrade libreoffice-help-jaUpgrade libreoffice-langpack-frUpgrade libreoffice-bshUpgrade libreoffice-help-ltUpgrade autocorr-afUpgrade libreoffice-gdb-debug-supportUpgrade libreoffice-help-etUpgrade autocorr-faUpgrade libreoffice-langpack-bnUpgrade libreoffice-debuginfoUpgrade libreoffice-help-fiUpgrade libreoffice-graphicfilterUpgrade libreoffice-langpack-esUpgrade libreoffice-langpack-afUpgrade libreoffice-langpack-svUpgrade libreoffice-langpack-euUpgrade libreoffice-langpack-taUpgrade libreoffice-langpack-zh-HantUpgrade libreoffice-help-bgUpgrade libreoffice-baseUpgrade libreoffice-langpack-dzUpgrade libreoffice-langpack-tsUpgrade libreoffice-help-euUpgrade libreoffice-langpack-elUpgrade libreoffice-pyunoUpgrade autocorr-ruUpgrade libreoffice-gladeUpgrade libreoffice-xsltfilterUpgrade libreoffice-langpack-fiUpgrade libreoffice-langpack-lvUpgrade autocorr-trUpgrade libreoffice-langpack-bgUpgrade libreoffice-help-ruUpgrade libreoffice-langpack-nsoUpgrade libreoffice-dataUpgrade autocorr-daUpgrade libreoffice-langpack-ssUpgrade libreoffice-help-daUpgrade libreofficekit-develUpgrade libreoffice-langpack-trUpgrade libreoffice-help-plUpgrade libreoffice-langpack-nrUpgrade autocorr-srUpgrade autocorr-bgUpgrade libreoffice-langpack-plUpgrade libreoffice-help-bnUpgrade libreoffice-langpack-zuUpgrade libreoffice-nlpsolverUpgrade libreoffice-langpack-teUpgrade libreoffice-langpack-slUpgrade libreoffice-langpack-pt-BRUpgrade autocorr-ptUpgrade libreoffice-langpack-asUpgrade libreoffice-langpack-enUpgrade libreoffice-langpack-itUpgrade libreoffice-help-pt-PTUpgrade libreoffice-writerUpgrade autocorr-svUpgrade autocorr-csUpgrade libreoffice-langpack-roUpgrade libreoffice-help-dzUpgrade libreoffice-wiki-publisherUpgrade libreoffice-postgresqlUpgrade libreoffice-langpack-ukUpgrade libreoffice-pdfimportUpgrade libreoffice-help-nnUpgrade libreoffice-rhinoUpgrade libreoffice-help-deUpgrade libreoffice-help-hiUpgrade libreoffice-officebean-commonUpgrade libreoffice-langpack-csUpgrade libreoffice-x11Upgrade libreoffice-help-idUpgrade libreoffice-help-pt-BRUpgrade libreoffice-help-skUpgrade autocorr-hrUpgrade libreoffice-langpack-brUpgrade libreoffice-langpack-tnUpgrade autocorr-viUpgrade libreoffice-help-ukUpgrade libreoffice-langpack-stUpgrade libreoffice-ure-commonUpgrade libreoffice-langpack-paUpgrade libreoffice-langpack-idUpgrade autocorr-slUpgrade libreoffice-help-hrUpgrade libreoffice-sdk-docUpgrade libreoffice-filtersUpgrade libreoffice-gtk2Upgrade libreoffice-langpack-deUpgrade libreoffice-help-svUpgrade libreoffice-help-arUpgrade libreoffice-langpack-hiUpgrade libreoffice-langpack-maiUpgrade libreoffice-help-zh-HansUpgrade libreoffice-langpack-xhUpgrade libreoffice-langpack-mrUpgrade libreoffice-help-taUpgrade libreoffice-help-roUpgrade libreoffice-coreUpgrade libreoffice-help-nbUpgrade libreoffice-langpack-caUpgrade libreoffice-langpack-nbUpgrade libreoffice-langpack-glUpgrade libreoffice-langpack-guUpgrade autocorr-enUpgrade libreoffice-langpack-thUpgrade libreoffice-opensymbol-fontsUpgrade libreoffice-langpack-arUpgrade libreoffice-langpack-daUpgrade autocorr-ltUpgrade libreoffice-help-guUpgrade libreoffice-help-heUpgrade libreoffice-langpack-knUpgrade libreoffice-langpack-koUpgrade libreoffice-langpack-huUpgrade libreoffice-langpack-heUpgrade libreoffice-emailmergeUpgrade libreoffice-help-nlUpgrade libreoffice-help-trUpgrade libreofficeUpgrade autocorr-itUpgrade libreoffice-langpack-veUpgrade libreoffice-help-caUpgrade libreoffice-help-siUpgrade libreoffice-langpack-mlUpgrade libreoffice-langpack-jaUpgrade libreoffice-help-slUpgrade libreoffice-langpack-pt-PTUpgrade autocorr-roUpgrade libreoffice-langpack-skUpgrade autocorr-deUpgrade autocorr-esUpgrade libreoffice-help-lvUpgrade libreoffice-langpack-cyUpgrade libreoffice-help-frUpgrade libreoffice-langpack-zh-HansUpgrade libreoffice-help-glUpgrade libreoffice-langpack-faUpgrade libreoffice-impressUpgrade libreoffice-drawUpgrade autocorr-isUpgrade autocorr-koUpgrade autocorr-jaUpgrade libreoffice-sdkNo solution existsUpgrade libreoffice-ogltransUpgrade libreoffice-help-huUpgrade autocorr-nlUpgrade libreoffice-langpack-nlUpgrade libreoffice-gtk3Upgrade libreoffice-langpack-kkUpgrade autocorr-lbUpgrade libreoffice-langpack-gaUpgrade libreoffice-ureUpgrade libreoffice-help-esUpgrade libreoffice-librelogoUpgrade libreoffice-langpack-srUpgrade autocorr-caUpgrade autocorr-zhUpgrade autocorr-frUpgrade libreoffice-langpack-orUpgrade libreoffice-help-el | Oct 31, 2018 | Apr 16, 2018 |
| Suse | — | Upgrade libreoffice-librelogoUpgrade libreoffice-l10n-dgoUpgrade libreoffice-l10n-boUpgrade libreoffice-l10n-faUpgrade libreoffice-l10n-mniUpgrade libreoffice-l10n-isUpgrade libreoffice-l10n-ca_valenciaUpgrade libreoffice-gladeUpgrade libreoffice-l10n-szlUpgrade libreoffice-branding-upstreamUpgrade libreoffice-l10n-xhUpgrade libreoffice-l10n-glUpgrade libreoffice-l10n-tgUpgrade libreoffice-calcUpgrade libreoffice-l10n-plUpgrade libreoffice-l10n-mkUpgrade libreoffice-l10n-kaUpgrade libreoffice-l10n-vecUpgrade libreoffice-l10n-slUpgrade libreoffice-l10n-bsUpgrade libreoffice-l10n-kmUpgrade libreoffice-l10n-guUpgrade libreoffice-l10n-hsbUpgrade libreoffice-icon-themesUpgrade libreofficekitUpgrade libreoffice-l10n-enUpgrade libreoffice-l10n-nnUpgrade libreoffice-mailmergeUpgrade libreoffice-l10n-csUpgrade libreoffice-l10n-hrUpgrade libreoffice-qt5Upgrade libreoffice-l10n-fiUpgrade libreoffice-l10n-teUpgrade libreoffice-l10n-gugUpgrade libreoffice-l10n-pt_PTUpgrade libreoffice-l10n-uzUpgrade libreoffice-l10n-en_zaUpgrade libreoffice-l10n-furUpgrade libreoffice-l10n-cyUpgrade libreoffice-l10n-nbUpgrade libreoffice-l10n-euUpgrade libreoffice-l10n-veUpgrade libreoffice-l10n-kokUpgrade libreoffice-l10n-ugUpgrade libreoffice-l10n-mlUpgrade libreoffice-l10n-bgUpgrade libreoffice-l10n-itUpgrade libreoffice-gdb-pretty-printersUpgrade libreoffice-l10n-jaUpgrade libreoffice-l10n-myUpgrade libreoffice-l10n-sw_tzUpgrade libreoffice-l10n-satUpgrade libreoffice-l10n-lvUpgrade libreoffice-l10n-ukUpgrade libreoffice-l10n-orUpgrade libreoffice-l10n-svUpgrade libreoffice-l10n-frUpgrade libreoffice-impressUpgrade libreoffice-l10n-asUpgrade libreoffice-l10n-ssUpgrade libreoffice-kde4Upgrade libreoffice-l10n-omUpgrade libreoffice-l10n-idUpgrade libreoffice-l10n-ruUpgrade libreoffice-l10n-nsoUpgrade libreoffice-l10n-pt_BRUpgrade libreoffice-drawUpgrade libreoffice-l10n-lbUpgrade libreoffice-l10n-tsUpgrade libreoffice-gtk2Upgrade libreoffice-l10n-amUpgrade libreoffice-l10n-thUpgrade libreoffice-l10n-sdUpgrade libreoffice-l10n-en_gbUpgrade libreoffice-l10n-caUpgrade libreoffice-l10n-nrUpgrade libreoffice-l10n-dsbUpgrade libreoffice-l10n-huUpgrade libreoffice-writerUpgrade libreoffice-l10n-brUpgrade libreoffice-l10n-hiUpgrade libreoffice-l10n-etUpgrade libreoffice-base-drivers-mysqlUpgrade libreoffice-l10n-sidUpgrade libreoffice-l10n-elUpgrade libreoffice-l10n-zh_CNUpgrade libreoffice-l10n-kkUpgrade libreoffice-l10n-bn_inUpgrade libreoffice-l10n-dzUpgrade libreofficeUpgrade libreoffice-l10n-mnUpgrade libreoffice-l10n-paUpgrade libreoffice-l10n-rwUpgrade libreoffice-sdk-docUpgrade libreoffice-l10n-skUpgrade libreoffice-baseUpgrade libreoffice-l10n-siUpgrade libreoffice-l10n-roUpgrade libreoffice-l10n-sa_inUpgrade libreoffice-l10n-deUpgrade libreoffice-l10n-gdUpgrade libreoffice-l10n-esUpgrade libreoffice-l10n-gaUpgrade libreoffice-l10n-maiUpgrade libreoffice-writer-extensionsUpgrade libreoffice-l10n-mrUpgrade libreoffice-l10n-ksUpgrade libreoffice-mathUpgrade libreoffice-l10n-taUpgrade libreoffice-filters-optionalUpgrade libreoffice-gnomeUpgrade libreoffice-l10n-zh_TWUpgrade libreoffice-l10n-ckbUpgrade libreoffice-l10n-arUpgrade libreoffice-l10n-srUpgrade libreoffice-l10n-ltUpgrade libreoffice-l10n-ocUpgrade libreoffice-l10n-koUpgrade libreoffice-calc-extensionsUpgrade libreoffice-l10n-eoUpgrade libreoffice-l10n-heUpgrade libreoffice-l10n-nlUpgrade libreoffice-l10n-neUpgrade libreoffice-l10n-afUpgrade libreoffice-l10n-fyUpgrade libreoffice-l10n-bnUpgrade libreoffice-l10n-beUpgrade libreoffice-l10n-stUpgrade libreoffice-officebeanUpgrade libreoffice-sdkUpgrade libreoffice-base-drivers-postgresqlUpgrade libreofficekit-develUpgrade libreoffice-l10n-loUpgrade libreoffice-l10n-knUpgrade libreoffice-l10n-zuUpgrade libreoffice-l10n-daUpgrade libreoffice-l10n-kabUpgrade libreoffice-l10n-kmr_latnUpgrade libreoffice-l10n-sqUpgrade libreoffice-l10n-trUpgrade libreoffice-l10n-tnUpgrade libreoffice-l10n-viUpgrade libreoffice-l10n-astUpgrade libreoffice-l10n-brxUpgrade libreoffice-pyunoUpgrade libreoffice-gtk3Upgrade libreoffice-l10n-tt | May 16, 2018 | Apr 16, 2018 |
| Ubuntu | — | Upgrade libreoffice-core | Feb 14, 2019 | Apr 16, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub