libreoffice vulnerabilities (Debian)
86 vulnerabilities.
-
libreofficeDebian Heap buffer overflow in dBASE index import 5.4 Medium -
libreofficeDebian Environment/ini-file leaks 6.7 Medium -
libreofficeDebian LFI and GET SSRF via GStreamer and HLS playlists 6.7 Medium -
libreofficeDebian LFI via calcext:data-mappings, sql provider and sdbc:flat:file:// db href 6.7 Medium -
libreofficeDebian LFI and GET SSRF via calcext:data-mappings and csv provider 6.7 Medium -
libreofficeDebian Arbitrary file write via calcext:data-mappings, sql provider and Firebird backup functionality 6.8 Medium -
libreofficeDebian RCE via calcext:data-mappings, sql provider and jdbc connector 8.5 High -
libreofficeDebian Out of bounds read in PICT image import 5.4 Medium -
libreofficeDebian Package URLs can be used to exfiltrate arbitrary INI file values and environment variables 6.7 Medium -
libreofficeDebian Stack buffer overflow in CFF to Type 1 font conversion 5.4 Medium -
libreofficeDebian Stack buffer overflow in CFF font hint handling 5.4 Medium -
libreofficeDebian Heap buffer overflow in PDF import stream handling 5.4 Medium -
libreofficeDebian Heap buffer overflow in PDF import encryption handling 5.4 Medium -
libreofficeDebian Heap buffer overflow in WMF text record import 5.4 Medium -
libreofficeDebian Heap buffer overflow in spreadsheet tracked-changes import 5.4 Medium -
libreofficeDebian Heap buffer overflow in Calc formula compilation 5.4 Medium -
libreofficeDebian Stack buffer overflow in PPT presentation import 5.4 Medium -
libreofficeDebian Heap buffer overflow in OOXML text box element import 5.4 Medium -
libreofficeDebian Heap buffer overflow in EMF+ gradient brush import 5.4 Medium -
libreofficeDebian Heap use-after-free in ODF number-format blank-width parsing 5.4 Medium -
libreofficeDebian Heap buffer overflow in DXF polyline import 5.4 Medium -
libreofficeDebian Heap Buffer Overflow in AgileEngine 5.4 Medium -
libreofficeDebian PDF signature forgery with adbe.pkcs7.sha1 SubFilter 2.4 Low -
libreofficeDebian Macro URL arbitrary script execution 7.2 High -
libreofficeDebian URL fetching can be used to exfiltrate arbitrary INI file values and environment variables 6.7 Medium -
libreofficeDebian Path traversal leading to arbitrary .ttf file write 2.4 Low -
libreofficeDebian Signatures in "repair mode" should not be trusted 7.8 High -
libreofficeDebian Ability to trust not validated macro signatures removed in high security mode 7.8 High -
libreofficeDebian TLS certificate are not properly verified when utilizing LibreOfficeKit 10.0 Critical -
libreofficeDebian Graphic on-click binding allows unchecked script execution 6.5 Medium -
libreofficeDebian Link targets allow arbitrary script execution 8.3 High -
libreofficeDebian Improper input validation enabling arbitrary Gstreamer pipeline injection 8.3 High -
libreofficeDebian Remote documents loaded without prompt via IFrame 5.3 Medium -
libreofficeDebian Array Index UnderFlow in Calc Formula Parsing 7.8 High -
libreofficeDebian Apache OpenOffice: Empty entry in Java class path 7.8 High -
libreofficeDebian Macro URL arbitrary script execution 6.3 Medium -
libreofficeDebian Weak Master Keys 8.8 High -
libreofficeDebian Execution of Untrusted Macros Due to Improper Certificate Validation 7.5 High -
libreofficeDebian Execution of Untrusted Macros Due to Improper Certificate Validation 7.5 High -
libreofficeDebian Incorrect trust validation of signature with ambiguous KeyInfo children 7.5 High -
libreofficeDebian Timestamp Manipulation with Signature Wrapping 7.5 High -
libreofficeDebian Content Manipulation with Double Certificate Attack 7.5 High -
libreofficeDebian Buffer overflow from a crafted DBF file 7.8 High -
libreofficeDebian XForms submissions could overwrite local files 6.5 Medium -
libreofficeDebian remote graphics contained in docx format retrieved in 'stealth mode' 5.3 Medium -
libreofficeDebian Crash-recovered MSOffice encrypted documents defaulted to not to using encryption on next save 5.3 Medium -
libreofficeDebian LibreOffice and OpenOffice automatically open embedded content 6.5 Medium -
libreofficeDebian Unsafe URL assembly flaw in allowed script location check 7.8 High -
libreofficeDebian Insufficient URL decoding flaw in categorizing macro location 7.8 High -
libreofficeDebian Insufficient URL encoding flaw in allowed script location check 7.8 High - Show olderLoading…