Vulnetix
Try Vulnetix Request Demo
CVE-2018-10120 PUBLISHED

The SwCTBWrapper::Read function in sw/source/filter/ww8/ww8toolbar.cxx in LibreOffice before 5.4.6.1 and 6.x before 6.0.2.1 does not validate a customizations index, which allows remote attackers to cause a denial of service (heap-based buffer overflow with write access) or possibly have unspecified other impact via a crafted document that contains a certain Microsoft Word record.

EPSS 0.50% · 65.7th percentile

Risk Scores

EPSS Score
0.50%
65.7th percentile

Affected Products

VendorProductVersions
Ubuntu:16.04:LTSlibreoffice0, 1:5.0.2-0ubuntu1, 1:5.0.2-0ubuntu2
Ubuntu:14.04:LTSlibreoffice1:4.2.8-0ubuntu5, 1:4.2.8-0ubuntu5.1, 0

Timeline

References

Open in Interactive Console →