Caolán McNamara

CVE-2017-7856 WRITEUP CRITICAL WRITEUP

LibreOffice < 5.2.6.1 - Out-of-bounds Write in SVMConverter

LibreOffice before 2017-03-11 has an out-of-bounds write caused by a heap-based buffer overflow in the SVMConverter::ImplConvertFromSVM1 function in vcl/source/gdi/svmconverter.cxx.

CVSS 9.8

View Code

CVE-2017-7870 WRITEUP CRITICAL WRITEUP

LibreOffice < 5.3.0.0 - Out-of-bounds Write via tools::Polygon::Insert

LibreOffice before 2017-01-02 has an out-of-bounds write caused by a heap-based buffer overflow related to the tools::Polygon::Insert function in tools/source/generic/poly.cxx.

CVSS 9.8

View Code

CVE-2017-7882 WRITEUP CRITICAL WRITEUP

LibreOffice < 5.2.6 - Out-of-bounds Write in HWPFile::TagsRead

LibreOffice before 2017-03-14 has an out-of-bounds write related to the HWPFile::TagsRead function in hwpfilter/source/hwpfile.cxx.

CVSS 9.8

View Code

CVE-2017-8358 WRITEUP CRITICAL WRITEUP

LibreOffice < 5.2.6 - Heap-Based Buffer Overflow in ReadJPEG Function

LibreOffice before 2017-03-17 has an out-of-bounds write caused by a heap-based buffer overflow related to the ReadJPEG function in vcl/source/filter/jpeg/jpegc.cxx.

CVSS 9.8

View Code

CVE-2018-20843 WRITEUP HIGH WRITEUP

libexpat < 2.2.7 - Denial of Service via XML Names with Excessive Colons

In libexpat in Expat before 2.2.7, XML input including XML names that contain a large number of colons could make the XML parser consume a high amount of RAM and CPU resources while processing (enough to be usable for denial-of-service attacks).

CVSS 7.5

View Code