PT-2017-2096 · Document Foundation+3 · Libreoffice+3

Published 2017-02-16 · Updated 2024-06-15 · CVE-2016-10327

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions LibreOffice versions prior to 2016-12-22

Description The issue is caused by a heap-based buffer overflow related to the EnhWMFReader::ReadEnhWMF function in vcl/source/filter/wmf/enhwmf.cxx. This can lead to an out-of-bounds write, potentially allowing a remote attacker to execute arbitrary code.

Recommendations For versions prior to 2016-12-22, update to a version released after 2016-12-22 to resolve the issue. As a temporary workaround, consider disabling the EnhWMFReader::ReadEnhWMF function until a patch is available.

Fix

Out of bounds Read

Memory Corruption

Weakness Enumeration

CWE-125

CWE-787

Related Identifiers

ALT-PU-2017-1170

BDU:2017-01264

CVE-2016-10327

OPENSUSE-SU-2024:10983-1

SUSE-SU-2017:1821-1

SUSE-SU-2017:2315-1

USN-3273-1

Affected Products

Alt Linux

Libreoffice

Suse

Ubuntu

References · 74

• https://github.com/LibreOffice/core/commit/7485fc2a1484f31631f62f97e5c64c0ae74c6416 · Patch
• https://bdu.fstec.ru/vul/2017-01264 · Security Note
• https://cve.org/CVERecord?id=CVE-2016-10327 · Security Note
• https://ubuntu.com/security/CVE-2016-10327 · Vendor Advisory
• https://ubuntu.com/security/CVE-2017-7870 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2017:2315-1 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2016-10327 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2016-10327 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2016-10327 · Security Note
• https://security.gentoo.org/glsa/201706-28 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2016-10327 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2016-10327 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2024:10983-1 · Vendor Advisory
• https://osv.dev/vulnerability/USN-3273-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2017:1821-1 · Vendor Advisory