LibreOffice 'vcl/source/filter/jpeg/jpegc.cxx' Heap Buffer Overflow Vulnerability
BID:98395
Info
LibreOffice 'vcl/source/filter/jpeg/jpegc.cxx' Heap Buffer Overflow Vulnerability
| Bugtraq ID: | 98395 |
| Class: | Design Error |
| CVE: |
CVE-2017-8358 |
| Remote: | Yes |
| Local: | No |
| Published: | May 11 2017 12:00AM |
| Updated: | May 23 2017 04:24PM |
| Credit: | The vendor reported this issue. |
| Vulnerable: |
LibreOffice LibreOffice - |
| Not Vulnerable: | |
Discussion
LibreOffice 'vcl/source/filter/jpeg/jpegc.cxx' Heap Buffer Overflow Vulnerability
LibreOffice is prone to a heap-based buffer-overflow vulnerability.
Attackers can exploit this issue to execute arbitrary code within the context of the affected application. Failed exploit attempts will result in a denial-of-service condition.
LibreOffice is prone to a heap-based buffer-overflow vulnerability.
Attackers can exploit this issue to execute arbitrary code within the context of the affected application. Failed exploit attempts will result in a denial-of-service condition.
Exploit / POC
LibreOffice 'vcl/source/filter/jpeg/jpegc.cxx' Heap Buffer Overflow Vulnerability
The researcher who discovered this issue has created a proof-of-concept. Please see the references for more information.
The researcher who discovered this issue has created a proof-of-concept. Please see the references for more information.
Solution / Fix
LibreOffice 'vcl/source/filter/jpeg/jpegc.cxx' Heap Buffer Overflow Vulnerability
Solution:
Updates are available. Please see the references or vendor advisory for more information.
Solution:
Updates are available. Please see the references or vendor advisory for more information.
References
LibreOffice 'vcl/source/filter/jpeg/jpegc.cxx' Heap Buffer Overflow Vulnerability
References:
References:
- LibreOffice Homepage (LibreOffice)
- libreoffice: Heap-buffer-overflow in null_convert (Chromium)
- ofz#889 readjust jpeg import (LibreOffice)