Bug ID 1034192
Summary VUL-0: CVE-2016-10327: libreoffice: heap-based buffer overflow (EnhWMFReader::ReadEnhWMF function in vcl/source/filter/wmf/enhwmf.cxx)
Classification openSUSE
Product openSUSE Distribution
Version Leap 42.2
Hardware Other
OS Other
Status NEW
Severity Normal
Priority P5 - None
Component Security
Assignee security-team@suse.de
Reporter mikhail.kasimov@gmail.com
QA Contact qa-bugs@suse.de
Found By ---
Blocker ---

Ref: https://nvd.nist.gov/vuln/detail/CVE-2016-10327
=====================================================
Description

LibreOffice before 2016-12-22 has an out-of-bounds write caused by a heap-based
buffer overflow related to the EnhWMFReader::ReadEnhWMF function in
vcl/source/filter/wmf/enhwmf.cxx.

Source:  MITRE      Last Modified:  04/14/2017
=====================================================

Hyperlink

[1] https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=313

[2]
https://github.com/LibreOffice/core/commit/7485fc2a1484f31631f62f97e5c64c0ae74c6416

(open-)SUSE:

https://software.opensuse.org/package/libreoffice

5.3.2.1 (TW, official repo)
5.2.5.1 (42.{1,2}, official repo)


You are receiving this mail because: