PT-2017-13306 · Document Foundation+2 · Libreoffice+3
Caolan Mcnamara
·
Published
2017-07-31
·
Updated
2020-11-09
·
CVE-2017-14226
CVSS v3.1
7.5
High
| Vector | AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
libwpd version 0.10.1
LibreOffice versions prior to 5.3.7
Description
The issue arises from the mishandling of iterators in WP1StylesListener.cpp, WP5StylesListener.cpp, and WP42StylesListener.cpp in libwpd 0.10.1. This mishandling allows remote attackers to cause a denial of service due to a heap-based buffer over-read in the WPXTableList class in WPXTable.cpp. The vulnerability can be triggered in LibreOffice applications before version 5.3.7, potentially leading to a remote attack against the application.
Recommendations
For libwpd version 0.10.1, consider updating to a version that fixes the iterator mishandling issue.
For LibreOffice versions prior to 5.3.7, update to version 5.3.7 or later to resolve the vulnerability.
As a temporary workaround, consider restricting access to the WPXTableList class in WPXTable.cpp until a patch is available.
Fix
DoS
Out of bounds Read
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Alt Linux
Libreoffice
Suse
Libwpd