Lucene search

K
osvGoogleOSV:DSA-3482-1
HistoryFeb 17, 2016 - 12:00 a.m.

libreoffice - security update

2016-02-1700:00:00
Google
osv.dev
8

0.021 Low

EPSS

Percentile

89.1%

An anonymous contributor working with VeriSign iDefense Labs
discovered that libreoffice, a full-featured office productivity
suite, did not correctly handle Lotus WordPro files. This would enable
an attacker to crash the program, or execute arbitrary code, by
supplying a specially crafted LWP file.

For the oldstable distribution (wheezy), these problems have been fixed
in version 1:3.5.4+dfsg2-0+deb7u6.

For the stable distribution (jessie), these problems have been fixed in
version 1:4.3.3-2+deb8u3.

For the testing (stretch) and unstable (sid) distributions, these
problems have been fixed in version 1:5.0.5~rc1-1.

We recommend that you upgrade your libreoffice packages.