{"id":"CVE-2017-9433","aliases":["DEBIAN-CVE-2017-9433","DSA-3875-1","EUVD-2017-18368","GHSA-p2vx-7mrm-7wj7","MGASA-2017-0194","SUSE-SU-2017:1821-1","SUSE-SU-2017:2315-1","SUSE-SU-2018:1076-1","UBUNTU-CVE-2017-9433","USN-3319-1","openSUSE-SU-2024:10959-1"],"status":"published","title":"Document Liberation Project libmwaw before 2017-04-08 has an out-of-bounds write caused by a heap...","description":"Document Liberation Project libmwaw before 2017-04-08 has an out-of-bounds write caused by a heap-based buffer overflow related to the MsWrd1Parser::readFootnoteCorrespondance function in lib/MsWrd1Parser.cxx.","severity":{"version":"3.0","score":9.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.02276,"percentile":0.8322,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-119"],"published":"2017-06-04T00:00:00Z","modified":"2026-09-01T20:03:52Z","fixes":[{"ecosystem":"Debian:12","package":"libmwaw","fixed_in":["0.3.9-2"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"libmwaw","fixed_in":["0.3.9-2"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"libmwaw","fixed_in":["0.3.9-2"],"sources":["osv"]},{"ecosystem":"Debian:8","package":"libmwaw","fixed_in":["0.3.1-2+deb8u1"],"sources":["osv"]},{"ecosystem":"Mageia:5","package":"libmwaw","fixed_in":["0.3.4-3.1.mga5"],"sources":["osv"]},{"ecosystem":"Ubuntu:14.04:LTS","package":"libmwaw","fixed_in":["0.1.11-1ubuntu1.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:16.04:LTS","package":"libmwaw","fixed_in":["0.3.7-1ubuntu2.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:12","package":"libmwaw","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.3.9-2"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"libmwaw","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.3.9-2"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"libmwaw","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.3.9-2"}]}]},{"source":"osv","ecosystem":"Debian:8","package":"libmwaw","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.3.1-2+deb8u1"}]}],"versions":["0.3.1-2"]},{"source":"osv","ecosystem":"Mageia:5","package":"libmwaw","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.3.4-3.1.mga5"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12 SP2","package":"libixion","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.12.1-12.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12 SP2","package":"libmwaw","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.3.11-9.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12 SP2","package":"liborcus","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.12.1-12.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12 SP2","package":"libreoffice","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.3.2-40.5.9"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12 SP2","package":"libstaroffice","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.0.3-2.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12 SP2","package":"libzmf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.0.1-2.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12 SP2","package":"myspell-dictionaries","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20170511-15.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP2","package":"libixion","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.12.1-12.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP2","package":"libmwaw","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.3.11-9.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP2","package":"liborcus","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.12.1-12.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP2","package":"libreoffice","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.3.2-40.5.9"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Workstation Extension 12 SP2","package":"libixion","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.12.1-12.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Workstation Extension 12 SP2","package":"libmwaw","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.3.11-9.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Workstation Extension 12 SP2","package":"liborcus","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.12.1-12.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Workstation Extension 12 SP2","package":"libreoffice","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.3.2-40.5.9"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Workstation Extension 12 SP2","package":"libstaroffice","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.0.3-2.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Workstation Extension 12 SP2","package":"libzmf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.0.1-2.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Workstation Extension 12 SP2","package":"myspell-dictionaries","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20170511-15.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12 SP3","package":"libixion","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.12.1-13.2.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12 SP3","package":"libmwaw","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.3.11-7.5.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12 SP3","package":"liborcus","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.12.1-10.5.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12 SP3","package":"libreoffice","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.5.2-43.5.4"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12 SP3","package":"libstaroffice","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.0.3-4.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12 SP3","package":"libzmf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.0.1-4.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12 SP3","package":"myspell-dictionaries","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20170511-16.2.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP3","package":"libixion","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.12.1-13.2.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP3","package":"libmwaw","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.3.11-7.5.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP3","package":"liborcus","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.12.1-10.5.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP3","package":"libreoffice","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.5.2-43.5.4"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Workstation Extension 12 SP3","package":"libixion","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.12.1-13.2.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Workstation Extension 12 SP3","package":"libmwaw","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.3.11-7.5.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Workstation Extension 12 SP3","package":"liborcus","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.12.1-10.5.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Workstation Extension 12 SP3","package":"libreoffice","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.5.2-43.5.4"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Workstation Extension 12 SP3","package":"libstaroffice","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.0.3-4.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Workstation Extension 12 SP3","package":"libzmf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.0.1-4.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Workstation Extension 12 SP3","package":"myspell-dictionaries","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20170511-16.2.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12 SP3","package":"boost","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.54.0-26.3.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12 SP3","package":"gnome-documents","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.20.1-10.6.3"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12 SP3","package":"libepubgen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.1.0-6.6.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12 SP3","package":"libixion","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.13.0-13.6.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12 SP3","package":"libmwaw","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.3.13-7.9.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12 SP3","package":"liborcus","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.13.4-10.9.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12 SP3","package":"libqxp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.0.1-1.3.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12 SP3","package":"libreoffice","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.0.3.2-43.30.2"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12 SP3","package":"libstaroffice","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.0.5-7.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12 SP3","package":"libwps","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.4.7-10.7.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12 SP3","package":"myspell-dictionaries","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20180403-16.9.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP3","package":"boost","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.54.0-26.3.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP3","package":"libepubgen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.1.0-6.6.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP3","package":"libixion","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.13.0-13.6.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP3","package":"libmwaw","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.3.13-7.9.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP3","package":"liborcus","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.13.4-10.9.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP3","package":"libqxp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.0.1-1.3.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP3","package":"libreoffice","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.0.3.2-43.30.2"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP3","package":"libwps","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.4.7-10.7.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP3","package":"boost","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.54.0-26.3.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP3","package":"boost","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.54.0-26.3.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Workstation Extension 12 SP3","package":"boost","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.54.0-26.3.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Workstation Extension 12 SP3","package":"gnome-documents","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.20.1-10.6.3"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Workstation Extension 12 SP3","package":"libepubgen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.1.0-6.6.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Workstation Extension 12 SP3","package":"libixion","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.13.0-13.6.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Workstation Extension 12 SP3","package":"libmwaw","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.3.13-7.9.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Workstation Extension 12 SP3","package":"liborcus","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.13.4-10.9.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Workstation Extension 12 SP3","package":"libqxp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.0.1-1.3.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Workstation Extension 12 SP3","package":"libreoffice","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.0.3.2-43.30.2"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Workstation Extension 12 SP3","package":"libstaroffice","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.0.5-7.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Workstation Extension 12 SP3","package":"libwps","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.4.7-10.7.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Workstation Extension 12 SP3","package":"myspell-dictionaries","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20180403-16.9.1"}]}],"bundled":4},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"libmwaw","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.1.11-1ubuntu1.1"}]}],"versions":["0.1.10-1","0.1.11-1","0.1.11-1ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"libmwaw","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.3.7-1ubuntu2.1"}]}],"versions":["0.3.5-1ubuntu1","0.3.6-1ubuntu1","0.3.7-1ubuntu1","0.3.7-1ubuntu2"]},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"libmwaw","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.1.11-1ubuntu1.1"}]}],"versions":["0.1.10-1","0.1.11-1","0.1.11-1ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"libmwaw","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.3.7-1ubuntu2.1"}]}],"versions":["0.3.5-1ubuntu1","0.3.6-1ubuntu1","0.3.7-1ubuntu1","0.3.7-1ubuntu2"]}],"products":[{"vendor":"libmwaw_project","product":"libmwaw"}],"references":[{"url":"https://sourceforge.net/p/libmwaw/libmwaw/ci/68b3b74569881248bfb6cbb4266177cc253b292f/","tags":["x_refsource_MISC","x_transferred","Patch","Third Party Advisory","fix"]},{"url":"https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=1037","tags":["x_refsource_MISC","x_transferred","Issue Tracking","Third Party Advisory","VDB Entry","report"]},{"url":"http://www.debian.org/security/2017/dsa-3875","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred","advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-9433"},{"url":"https://sourceforge.net/p/libmwaw/libmwaw/ci/68b3b74569881248bfb6cbb4266177cc253b292f"},{"url":"https://github.com/advisories/GHSA-p2vx-7mrm-7wj7"},{"url":"https://security-tracker.debian.org/tracker/CVE-2017-9433","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2017-0194.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=21071","tags":["report"]},{"url":"https://www.debian.org/security/2017/dsa-3875","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2017/suse-su-20171821-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1015115","tags":["report"]},{"url":"https://bugzilla.suse.com/1015118","tags":["report"]},{"url":"https://bugzilla.suse.com/1015360","tags":["report"]},{"url":"https://bugzilla.suse.com/1017925","tags":["report"]},{"url":"https://bugzilla.suse.com/1021369","tags":["report"]},{"url":"https://bugzilla.suse.com/1021373","tags":["report"]},{"url":"https://bugzilla.suse.com/1028817","tags":["report"]},{"url":"https://bugzilla.suse.com/1034192","tags":["report"]},{"url":"https://bugzilla.suse.com/1034329","tags":["report"]},{"url":"https://bugzilla.suse.com/1034568","tags":["report"]},{"url":"https://bugzilla.suse.com/1035087","tags":["report"]},{"url":"https://bugzilla.suse.com/1036975","tags":["report"]},{"url":"https://bugzilla.suse.com/1042828","tags":["report"]},{"url":"https://bugzilla.suse.com/948058","tags":["report"]},{"url":"https://bugzilla.suse.com/959926","tags":["report"]},{"url":"https://bugzilla.suse.com/962777","tags":["report"]},{"url":"https://bugzilla.suse.com/963436","tags":["report"]},{"url":"https://bugzilla.suse.com/972777","tags":["report"]},{"url":"https://bugzilla.suse.com/975283","tags":["report"]},{"url":"https://bugzilla.suse.com/976831","tags":["report"]},{"url":"https://bugzilla.suse.com/989564","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2015-8947","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-10327","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-2052","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7870","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7882","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-8358","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-9433","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2017/suse-su-20172315-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1021675","tags":["report"]},{"url":"https://bugzilla.suse.com/1035589","tags":["report"]},{"url":"https://bugzilla.suse.com/1045339","tags":["report"]},{"url":"https://bugzilla.suse.com/947117","tags":["report"]},{"url":"https://bugzilla.suse.com/954776","tags":["report"]},{"url":"https://www.suse.com/support/update/announcement/2018/suse-su-20181076-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1042829","tags":["report"]},{"url":"https://bugzilla.suse.com/1077375","tags":["report"]},{"url":"https://bugzilla.suse.com/1080249","tags":["report"]},{"url":"https://bugzilla.suse.com/1083213","tags":["report"]},{"url":"https://bugzilla.suse.com/1083993","tags":["report"]},{"url":"https://bugzilla.suse.com/1088662","tags":["report"]},{"url":"https://bugzilla.suse.com/1089124","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2017-9432","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-1055","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-6871","tags":["web"]},{"url":"https://ubuntu.com/security/CVE-2017-9433","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-3319-1","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-9433","tags":["report"]},{"url":"","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2017-9433","description":"Document Liberation Project libmwaw before 2017-04-08 has an out-of-bounds write caused by a heap-based buffer overflow related to the MsWrd1Parser::readFootnoteCorrespondance function in lib/MsWrd1Parser.cxx.","status":"published","published":"2017-06-05T02:47:00Z","modified":"2024-08-05T17:11:00.392Z","updated_at":"2026-11-02T14:33:13.606903Z"}],"euvd":[{"id":"EUVD-2017-18368","description":"Document Liberation Project libmwaw before 2017-04-08 has an out-of-bounds write caused by a heap-based buffer overflow related to the MsWrd1Parser::readFootnoteCorrespondance function in lib/MsWrd1Parser.cxx.","status":"published","published":"2017-06-05T02:47:00Z","modified":"2024-08-05T17:11:00Z","updated_at":"2026-11-03T02:23:28.210565Z"}],"ghsa":[{"id":"GHSA-p2vx-7mrm-7wj7","title":"Document Liberation Project libmwaw before 2017-04-08 has an out-of-bounds write caused by a heap...","description":"Document Liberation Project libmwaw before 2017-04-08 has an out-of-bounds write caused by a heap-based buffer overflow related to the MsWrd1Parser::readFootnoteCorrespondance function in lib/MsWrd1Parser.cxx.","status":"published","published":"2022-05-17T00:26:31Z","modified":"2025-04-20T03:38:26Z","cvss":[{"version":"3.0","score":9.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"cwes":["CWE-119"],"updated_at":"2026-11-02T15:01:46.283604Z"}],"nvd":[{"id":"CVE-2017-9433","description":"Document Liberation Project libmwaw before 2017-04-08 has an out-of-bounds write caused by a heap-based buffer overflow related to the MsWrd1Parser::readFootnoteCorrespondance function in lib/MsWrd1Parser.cxx.","status":"published","published":"2017-06-05T03:29:00.277Z","modified":"2026-06-17T01:28:05.597Z","cvss":[{"version":"3.0","score":9.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary"},{"version":"2.0","score":7.5,"vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","level":"high","assessor":"primary"}],"cwes":["CWE-119"],"updated_at":"2026-11-02T14:03:49.449157Z"}],"osv":[{"id":"CVE-2017-9433","description":"Document Liberation Project libmwaw before 2017-04-08 has an out-of-bounds write caused by a heap-based buffer overflow related to the MsWrd1Parser::readFootnoteCorrespondance function in lib/MsWrd1Parser.cxx.","status":"published","published":"2017-06-05T03:29:00.277Z","modified":"2026-04-16T06:16:39.294056048Z","cvss":[{"version":"3.0","score":9.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:44:06.868403Z"},{"id":"DEBIAN-CVE-2017-9433","description":"Document Liberation Project libmwaw before 2017-04-08 has an out-of-bounds write caused by a heap-based buffer overflow related to the MsWrd1Parser::readFootnoteCorrespondance function in lib/MsWrd1Parser.cxx.","status":"published","published":"2017-06-05T03:29:00.277Z","modified":"2026-09-01T20:03:52.194759547Z","cvss":[{"version":"3.0","score":9.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:45:29.698576Z"},{"id":"UBUNTU-CVE-2017-9433","description":"Document Liberation Project libmwaw before 2017-04-08 has an out-of-bounds write caused by a heap-based buffer overflow related to the MsWrd1Parser::readFootnoteCorrespondance function in lib/MsWrd1Parser.cxx.","status":"published","published":"2017-06-04T00:00:00Z","modified":"2026-04-22T11:37:59.934145Z","cvss":[{"version":"3.0","score":9.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:54:16.154988Z"},{"id":"DSA-3875-1","title":"libmwaw - security update","status":"published","published":"2017-06-09T00:00:00Z","modified":"2026-03-09T01:20:14.924003Z","updated_at":"2026-11-02T15:46:16.523846Z"},{"id":"MGASA-2017-0194","title":"Updated libmwaw packages fix security vulnerability","description":"It was discovered that a buffer overflow in libmwaw might result in the\nexecution of arbitrary code if a malformed document is opened\n(CVE-2017-9433).\n","status":"published","published":"2017-06-29T21:40:57Z","modified":"2026-04-16T06:23:33.997749753Z","updated_at":"2026-11-02T15:49:40.103088Z"},{"id":"openSUSE-SU-2024:10959-1","title":"libmwaw-0_3-3-0.3.20-1.1 on GA media","description":"These are all security issues fixed in the libmwaw-0_3-3-0.3.20-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T03:22:46.160992Z","updated_at":"2026-11-02T16:58:34.894275Z"},{"id":"SUSE-SU-2017:1821-1","title":"Security update for libreoffice","description":"\nLibreOffice was updated to version 5.3.3.2, bringing new features and enhancements:\n\nWriter:\n\n- New 'Go to Page' dialog for quickly jumping to another page.\n- Support for 'Table Styles'.\n- New drawing tools were added.\n- Improvements in the toolbar.\n- Borderless padding is displayed.\n\nCalc:\n\n- New drawing tools were added.\n- In new installations the default setting for new documents is now 'Enable wildcards in formulas'\n  instead of regular expressions.\n- Improved compatibility with ODF 1.2\n\nImpress:\n\n- Images inserted via 'Photo Album' can now be linked instead of embedded in the document.\n- When launching Impress, a Template Selector allows you to choose a Template to start with.\n- Two new default templates: Vivid and Pencil.\n- All existing templates have been improved.\n\nDraw:\n\n- New arrow endings, including Crow's foot notation's ones.\n\nBase:\n\n- Firebird has been upgraded to version 3.0.0. It is unable to read back Firebird 2.5 data,\n  so embedded Firebird odb files created in LibreOffice version up to 5.2 cannot be opened\n  with LibreOffice 5.3.\n\nSome security issues have also been fixed:\n\n- CVE-2017-7870: An out-of-bounds write caused by a heap-based buffer overflow related to\n  the tools::Polygon::Insert function.\n- CVE-2017-7882: An out-of-bounds write related to the HWPFile::TagsRead function.\n- CVE-2017-8358: an out-of-bounds write caused by a heap-based buffer overflow related to\n  the ReadJPEG function.\n- CVE-2016-10327: An out-of-bounds write caused by a heap-based buffer overflow related to\n  the EnhWMFReader::ReadEnhWMF function.\n- CVE-2017-9433: An out-of-bounds write caused by a heap-based buffer overflow related to\n  the MsWrd1Parser::readFootnoteCorrespondance function in libmwaw.\n\nA comprehensive list of new features and changes in this release is available at:\nhttps://wiki.documentfoundation.org/ReleaseNotes/5.3\n","status":"published","published":"2017-07-07T19:21:49Z","modified":"2026-02-04T02:32:34.206267Z","updated_at":"2026-11-02T15:53:44.209561Z"},{"id":"SUSE-SU-2017:2315-1","title":"Security update for libreoffice","description":"\nLibreOffice was updated to version 5.3.5.2, bringing new features and enhancements:\n\nWriter:\n\n- New 'Go to Page' dialog for quickly jumping to another page.\n- Support for 'Table Styles'.\n- New drawing tools were added.\n- Improvements in the toolbar.\n- Borderless padding is displayed.\n\nCalc:\n\n- New drawing tools were added.\n- In new installations the default setting for new documents is now 'Enable wildcards in formulas'\n  instead of regular expressions.\n- Improved compatibility with ODF 1.2\n\nImpress:\n\n- Images inserted via 'Photo Album' can now be linked instead of embedded in the document.\n- When launching Impress, a Template Selector allows you to choose a Template to start with.\n- Two new default templates: Vivid and Pencil.\n- All existing templates have been improved.\n\nDraw:\n\n- New arrow endings, including Crow's foot notation's ones.\n\nBase:\n\n- Firebird has been upgraded to version 3.0.0. It is unable to read back Firebird 2.5 data,\n  so embedded Firebird odb files created in LibreOffice version up to 5.2 cannot be opened\n  with LibreOffice 5.3.\n\nSome security issues have also been fixed:\n\n- CVE-2017-7870: An out-of-bounds write caused by a heap-based buffer overflow related to\n  the tools::Polygon::Insert function.\n- CVE-2017-7882: An out-of-bounds write related to the HWPFile::TagsRead function.\n- CVE-2017-8358: an out-of-bounds write caused by a heap-based buffer overflow related to\n  the ReadJPEG function.\n- CVE-2016-10327: An out-of-bounds write caused by a heap-based buffer overflow related to\n  the EnhWMFReader::ReadEnhWMF function.\n- CVE-2017-9433: An out-of-bounds write caused by a heap-based buffer overflow related to\n  the MsWrd1Parser::readFootnoteCorrespondance function in libmwaw.\n\nA comprehensive list of new features and changes in this release is available at:\nhttps://wiki.documentfoundation.org/ReleaseNotes/5.3\n","status":"published","published":"2017-08-31T17:45:11Z","modified":"2026-02-04T04:27:31.461212Z","updated_at":"2026-11-02T15:53:44.209561Z"},{"id":"SUSE-SU-2018:1076-1","title":"Recommended update for LibreOffice","description":"\nLibreOffice was updated to version 6.0.3.\n\nFollowing new features were added:\n\n- The Notebookbar, although still an experimental feature, has been\n  enriched with two new variants: Grouped Bar Full for Writer, Calc and\n  Impress, and Tabbed Compact for Writer. The Special Characters dialog\n  has been reworked, with the addition of lists for Recent and Favorite\n  characters, along with a Search field. The Customize dialog has also\n  been redesigned, and is now more modern and intuitive.\n- In Writer, a Form menu has been added, making it easier to access one\n  of the most powerful – and often unknown – LibreOffice features: the\n  ability to design forms, and create standards-compliant PDF forms. The\n  Find toolbar has been enhanced with a drop-down list of search types, to\n  speed up navigation. A new default table style has been added, together\n  with a new collection of table styles to reflect evolving visual trends.\n- The Mail Merge function has been improved, and it is now possible to\n  use either a Writer document or an XLSX file as data source.\n- In Calc, ODF 1.2-compliant functions SEARCHB, FINDB and REPLACEB have\n  been added, to improve support for the ISO standard format. Also, a\n  cell range selection or a selected group of shapes (images) can be now\n  exported in PNG or JPG format.\n- In Impress, the default slide size has been switched to 16:9, to support\n  the most recent form factors of screens and projectors. As a consequence,\n  10 new Impress templates have been added, and a couple of old templates\n  have been updated.\n\nChanges in components:\n\n- The old WikiHelp has been replaced by the new Help Online system, with\n  attractive web pages that can also be displayed on mobile devices. In\n  general, LibreOffice Help has been updated both in terms of contents and\n  code, with other improvements due all along the life of the LibreOffice\n  6 family.\n- User dictionaries now allow automatic affixation or compounding. This\n  is a general spell checking improvement in LibreOffice which can speed\n  up work for Writer users. Instead of manually handling several forms of a\n  new word in a language with rich morphology or compounding, the Hunspell\n  spell checker can automatically recognize a new word with affixes or\n  compounds, based on a “Grammar By” model.\n\nSecurity features and changes:\n\n- OpenPGP keys can be used to sign ODF documents on all desktop operating\n  systems, with experimental support for OpenPGP-based encryption. To enable\n  this feature, users will have to install the specific GPG software for\n  their operating systems.\n\n- Document classification has also been improved, and allows multiple\n  policies (which are now exported to OOXML files). In Writer, marking\n  and signing are now supported at paragraph level.\n\nInteroperability changes:\n\n- OOXML interoperability has been improved in several areas: import of\n  SmartArt and import/export of ActiveX controls, support of embedded text\n  documents and spreadsheets, export of embedded videos to PPTX, export\n  of cross-references to DOCX, export of MailMerge fields to DOCX, and\n  improvements to the PPTX filter to prevent the creation of broken files.\n- New filters for exporting Writer documents to ePub and importing\n  QuarkXPress files have also been added, together with an improved filter\n  for importing EMF+ (Enhanced Metafile Format Plus) files as used by\n  Microsoft Office documents. Some improvements have also been added\n  to the ODF export filter, making it easier for other ODF readers to\n  display visuals.\n\nThe full blog entry for the 6.0 release can be found here:\n\n\thttps://blog.documentfoundation.org/blog/2018/01/31/libreoffice-6/\n\nThe full release notes can be found here:\n\n\thttps://wiki.documentfoundation.org/ReleaseNotes/6.0\n\nThe libraries that LibreOffice depends on also have been udpated to their current versions.\n  ","status":"published","published":"2018-04-25T12:16:53Z","modified":"2026-02-04T04:35:07.29943Z","updated_at":"2026-11-02T15:53:44.594517Z"},{"id":"USN-3319-1","title":"libmwaw vulnerability","description":"It was discovered that libmwaw incorrectly handled certain malformed\ndocument files. If a user or automated system were tricked into opening a\nspecially crafted file, a remote attacker could cause libmwaw to crash,\nresulting in a denial of service, or possibly execute arbitrary code.\n","status":"published","published":"2017-06-15T15:03:06Z","modified":"2026-04-22T09:36:04.537122Z","updated_at":"2026-11-02T16:58:13.496563Z"}]}}