{"id":"CVE-2018-11790","aliases":["DEBIAN-CVE-2018-11790","EUVD-2018-3789","GHSA-jv89-hcw9-2wwr","UBUNTU-CVE-2018-11790","USN-3883-1"],"status":"published","title":"When loading a document with Apache Open Office 4.1.5 and earlier with smaller end line...","description":"When loading a document with Apache Open Office 4.1.5 and earlier with smaller end line termination than the operating system uses, the defect occurs. In this case OpenOffice runs into an Arithmetic Overflow at a string length calculation.","severity":{"version":"3.0","score":7.8,"vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.01025,"percentile":0.63809,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-682"],"published":"2018-12-31T00:00:00Z","modified":"2026-10-23T18:02:58Z","fixes":[{"ecosystem":"Debian:12","package":"libreoffice","fixed_in":["1:4.0.3-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"libreoffice","fixed_in":["1:4.0.3-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"libreoffice","fixed_in":["1:4.0.3-1"],"sources":["osv"]},{"ecosystem":"Ubuntu:14.04:LTS","package":"libreoffice","fixed_in":["1:4.2.8-0ubuntu5.5"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:12","package":"libreoffice","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:4.0.3-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"libreoffice","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:4.0.3-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"libreoffice","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:4.0.3-1"}]}]},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"libreoffice","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:4.2.8-0ubuntu5.5"}]}],"versions":["1:4.1.2~rc3-0ubuntu1","1:4.1.2~rc3-0ubuntu2","1:4.1.3-0ubuntu2","1:4.1.3-0ubuntu3","1:4.2.0~rc4-0ubuntu1","1:4.2.0-0ubuntu1","1:4.2.1-0ubuntu1","1:4.2.3~rc2-0ubuntu1","1:4.2.3~rc3-0ubuntu1","1:4.2.3~rc3-0ubuntu2","1:4.2.4-0ubuntu2","1:4.2.6.3-0ubuntu1","1:4.2.7-0ubuntu1","1:4.2.7-0ubuntu2","1:4.2.8-0ubuntu2","1:4.2.8-0ubuntu3","1:4.2.8-0ubuntu4","1:4.2.8-0ubuntu5","1:4.2.8-0ubuntu5.1","1:4.2.8-0ubuntu5.2","1:4.2.8-0ubuntu5.3"]},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"libreoffice","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:4.2.8-0ubuntu5.5"}]}],"versions":["1:4.1.2~rc3-0ubuntu1","1:4.1.2~rc3-0ubuntu2","1:4.1.3-0ubuntu2","1:4.1.3-0ubuntu3","1:4.2.0~rc4-0ubuntu1","1:4.2.0-0ubuntu1","1:4.2.1-0ubuntu1","1:4.2.3~rc2-0ubuntu1","1:4.2.3~rc3-0ubuntu1","1:4.2.3~rc3-0ubuntu2","1:4.2.4-0ubuntu2","1:4.2.6.3-0ubuntu1","1:4.2.7-0ubuntu1","1:4.2.7-0ubuntu2","1:4.2.8-0ubuntu2","1:4.2.8-0ubuntu3","1:4.2.8-0ubuntu4","1:4.2.8-0ubuntu5","1:4.2.8-0ubuntu5.1","1:4.2.8-0ubuntu5.2","1:4.2.8-0ubuntu5.3"],"bundled":5},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"libreoffice","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:5.1.6~rc2-0ubuntu1~xenial6"}]}],"versions":["1:5.0.2-0ubuntu1","1:5.0.2-0ubuntu2","1:5.0.2-0ubuntu5","1:5.0.2-0ubuntu7","1:5.0.2-0ubuntu8","1:5.1.0~rc3-0ubuntu2","1:5.1.0-0ubuntu1","1:5.1.1~rc2-0ubuntu1","1:5.1.1-0ubuntu1","1:5.1.1-0ubuntu3","1:5.1.2-0ubuntu1","1:5.1.3-0ubuntu1","1:5.1.4-0ubuntu1","1:5.1.6~rc2-0ubuntu1~xenial1","1:5.1.6~rc2-0ubuntu1~xenial2","1:5.1.6~rc2-0ubuntu1~xenial3","1:5.1.6~rc2-0ubuntu1~xenial4"],"bundled":5}],"products":[{"vendor":"apache","product":"openoffice"},{"vendor":"apache software foundation","product":"apache openoffice"},{"vendor":"canonical","product":"ubuntu_linux"}],"references":[{"url":"https://www.openoffice.org/security/cves/CVE-2018-11790.html","tags":["x_refsource_CONFIRM","x_transferred","Patch","Vendor Advisory","fix"]},{"url":"https://usn.ubuntu.com/3883-1/","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred","Third Party Advisory","advisory"]},{"url":"http://www.securityfocus.com/bid/106803","tags":["vdb-entry","x_refsource_BID","x_transferred","Third Party Advisory","VDB Entry","advisory"]},{"url":"https://lists.apache.org/thread.html/7394e6b5f78a878bd0c44e9bc9adf90b8cdf49e9adc0f287145aba9b%40%3Ccommits.openoffice.apache.org%3E","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-11790"},{"url":"https://lists.apache.org/thread.html/7394e6b5f78a878bd0c44e9bc9adf90b8cdf49e9adc0f287145aba9b@%3Ccommits.openoffice.apache.org%3E"},{"url":"https://github.com/advisories/GHSA-jv89-hcw9-2wwr"},{"url":"https://security-tracker.debian.org/tracker/CVE-2018-11790","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2018-11790","tags":["report"]},{"url":"https://www.openwall.com/lists/oss-security/2019/01/16/2","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-3883-1","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-11790","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-10119","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-10120","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-10583","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-16858","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2018-11790","description":"When loading a document with Apache Open Office 4.1.5 and earlier with smaller end line termination than the operating system uses, the defect occurs. In this case OpenOffice runs into an Arithmetic Overflow at a string length calculation.","status":"published","published":"2019-01-31T16:00:00Z","modified":"2024-09-16T19:30:22.439Z","updated_at":"2026-11-02T14:35:09.570381Z"}],"euvd":[{"id":"EUVD-2018-3789","description":"When loading a document with Apache Open Office 4.1.5 and earlier with smaller end line termination than the operating system uses, the defect occurs. In this case OpenOffice runs into an Arithmetic Overflow at a string length calculation.","status":"published","published":"2019-01-31T16:00:00Z","modified":"2024-09-16T19:30:22Z","updated_at":"2026-11-03T00:55:22.355392Z"}],"ghsa":[{"id":"GHSA-jv89-hcw9-2wwr","title":"When loading a document with Apache Open Office 4.1.5 and earlier with smaller end line...","description":"When loading a document with Apache Open Office 4.1.5 and earlier with smaller end line termination than the operating system uses, the defect occurs. In this case OpenOffice runs into an Arithmetic Overflow at a string length calculation.","status":"published","published":"2022-05-13T01:31:05Z","modified":"2023-02-01T05:08:18Z","cvss":[{"version":"3.0","score":7.8,"vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-682"],"updated_at":"2026-11-02T14:50:43.431885Z"}],"nvd":[{"id":"CVE-2018-11790","description":"When loading a document with Apache Open Office 4.1.5 and earlier with smaller end line termination than the operating system uses, the defect occurs. In this case OpenOffice runs into an Arithmetic Overflow at a string length calculation.","status":"published","published":"2019-01-31T16:29:00.247Z","modified":"2026-06-17T01:36:36.477Z","cvss":[{"version":"3.0","score":7.8,"vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"},{"version":"2.0","score":4.6,"vector":"AV:L/AC:L/Au:N/C:P/I:P/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-682"],"updated_at":"2026-11-02T14:04:53.728218Z"}],"osv":[{"id":"CVE-2018-11790","description":"When loading a document with Apache Open Office 4.1.5 and earlier with smaller end line termination than the operating system uses, the defect occurs. In this case OpenOffice runs into an Arithmetic Overflow at a string length calculation.","status":"published","published":"2019-01-31T16:29:00.247Z","modified":"2026-03-14T00:56:56.01006Z","cvss":[{"version":"3.0","score":7.8,"vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:44:07.934182Z"},{"id":"DEBIAN-CVE-2018-11790","description":"When loading a document with Apache Open Office 4.1.5 and earlier with smaller end line termination than the operating system uses, the defect occurs. In this case OpenOffice runs into an Arithmetic Overflow at a string length calculation.","status":"published","published":"2019-01-31T16:29:00.247Z","modified":"2026-10-23T18:02:58.050105543Z","cvss":[{"version":"3.0","score":7.8,"vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:45:29.988046Z"},{"id":"UBUNTU-CVE-2018-11790","description":"When loading a document with Apache Open Office 4.1.5 and earlier with smaller end line termination than the operating system uses, the defect occurs. In this case OpenOffice runs into an Arithmetic Overflow at a string length calculation.","status":"published","published":"2018-12-31T00:00:00Z","modified":"2026-04-22T11:43:13.167305Z","cvss":[{"version":"3.0","score":7.8,"vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:54:16.544091Z"},{"id":"USN-3883-1","title":"libreoffice vulnerabilities","description":"It was discovered that LibreOffice incorrectly handled certain document\nfiles. If a user were tricked into opening a specially crafted document, a\nremote attacker could cause LibreOffice to crash, and possibly execute\narbitrary code. (CVE-2018-10119, CVE-2018-10120, CVE-2018-11790)\n\nIt was discovered that LibreOffice incorrectly handled embedded SMB\nconnections in document files. If a user were tricked in to opening a\nspecially crafted document, a remote attacker could possibly exploit this\nto obtain sensitive information. (CVE-2018-10583)\n\nAlex Inführ discovered that LibreOffice incorrectly handled embedded\nscripts in document files. If a user were tricked into opening a specially\ncrafted document, a remote attacker could possibly execute arbitrary code.\n(CVE-2018-16858)\n","status":"published","published":"2019-02-06T14:21:58Z","modified":"2026-04-22T09:54:23.962535Z","updated_at":"2026-11-02T16:58:14.019824Z"}]}}