Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 71

Export CSV
CVE-2014-3524

libreoffice/openoffice.org: CSV command injection and DDE formulas

Apache OpenOffice before 4.1.1 allows remote attackers to execute arbitrary commands and possibly have other unspecified impact via a crafted Calc spreadsheet.

CVSS 2.0 · 9.3 Critical EPSS 14.1% KEV · Not listed
Vendors
Apache Libreoffice
Products
Openoffice Libreoffice
CVE-2014-3575

openoffice: Arbitrary file disclosure via crafted OLE objects

The OLE preview generation in Apache OpenOffice before 4.1.1 and OpenOffice.org (OOo) might allow remote attackers to embed arbitrary data into documents via crafted OLE objects.

CVSS 2.0 · 4.3 Medium EPSS 11.3% KEV · Not listed
Vendors
Apache Libreoffice Redhat
Products
Openoffice Libreoffice Enterprise Linux and 3 more
CVE-2014-3693

libreoffice: Use-After-Free in socket manager of Impress Remote

Use-after-free vulnerability in the socket manager of Impress Remote in LibreOffice 4.x before 4.2.7 and 4.3.x before 4.3.3 allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted request to TCP port 1599.

CVSS 2.0 · 7.5 High EPSS 5.1% KEV · Not listed
Vendors
Canonical Libreoffice Opensuse and 1 more
Products
Ubuntu Linux Libreoffice Opensuse and 4 more
CVE-2014-9093

libreoffice: crash importing malformed .rtf

LibreOffice before 4.3.5 allows remote attackers to cause a denial of service (invalid write operation and crash) and possibly execute arbitrary code via a crafted RTF file.

CVSS 2.0 · 7.5 High EPSS 4.1% KEV · Not listed
Vendors
Canonical Debian Fedoraproject and 1 more
Products
Ubuntu Linux Debian Linux Fedora and 1 more
CVE-2015-1774

libreoffice: HWP file filter vulnerability

The HWP filter in LibreOffice before 4.3.7 and 4.4.x before 4.4.2 and Apache OpenOffice before 4.1.2 allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted HWP document, which triggers an out-of-bounds write.

CVSS 2.0 · 6.8 Medium EPSS 7.6% KEV · Not listed
Vendors
Apache Canonical Debian and 3 more
Products
Openoffice Ubuntu Linux Debian Linux and 6 more
CVE-2015-4551

libreoffice: Arbitrary file disclosure in Calc and Writer

LibreOffice before 4.4.5 and Apache OpenOffice before 4.1.2 uses the stored LinkUpdateMode configuration information in OpenDocument Format files and templates when handling links, which might allow remote attackers to obtain sensitive information via a crafted document, which embeds data from local files into (1) Calc or (2) Writer.

CVSS 2.0 · 4.3 Medium EPSS 13.8% KEV · Not listed
Vendors
Apache Canonical Debian and 2 more
Products
Openoffice Ubuntu Linux Debian Linux and 2 more
CVE-2015-5212

libreoffice: Integer underflow in PrinterSetup length

Integer underflow in LibreOffice before 4.4.5 and Apache OpenOffice before 4.1.2, when the configuration setting "Load printer settings with the document" is enabled, allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via crafted PrinterSetup data in an ODF document.

CVSS 2.0 · 6.8 Medium EPSS 8.7% KEV · Not listed
Vendors
Apache Canonical Debian and 2 more
Products
Openoffice Ubuntu Linux Debian Linux and 2 more
CVE-2015-5214

libreoffice: Bookmarks in DOC documents are insufficiently checked causing memory corruption

LibreOffice before 4.4.6 and 5.x before 5.0.1 and Apache OpenOffice before 4.1.2 allows remote attackers to cause a denial of service (memory corruption and application crash) or execute arbitrary code via an index to a non-existent bookmark in a DOC file.

CVSS 2.0 · 6.8 Medium EPSS 9.0% KEV · Not listed
Vendors
Apache Canonical Debian and 2 more
Products
Openoffice Ubuntu Linux Debian Linux and 2 more
CVE-2016-0794

libreoffice: Multiple out-of-bounds overflows in lwp filter

The lwp filter in LibreOffice before 5.0.4 allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via a crafted LotusWordPro (lwp) document.

CVSS 3.0 · 7.8 High EPSS 2.8% KEV · Not listed
Vendors
Canonical Libreoffice Redhat
Products
Ubuntu Linux Libreoffice Enterprise Linux
CVE-2016-0795

libreoffice: Multiple out-of-bounds overflows in lwp filter

LibreOffice before 5.0.5 allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via a crafted LwpTocSuperLayout record in a LotusWordPro (lwp) document.

CVSS 3.0 · 7.8 High EPSS 2.8% KEV · Not listed
Vendors
Canonical Libreoffice Redhat
Products
Ubuntu Linux Libreoffice Enterprise Linux
CVE-2016-4324

libreoffice: Dereference of invalid STL iterator on processing RTF file

Use-after-free vulnerability in LibreOffice before 5.1.4 allows remote attackers to execute arbitrary code via a crafted RTF file, related to stylesheet and superscript tokens.

CVSS 3.0 · 7.8 High EPSS 2.8% KEV · Not listed
Vendors
Canonical Debian Libreoffice
Products
Ubuntu Linux Debian Linux Libreoffice
CVE-2012-2665

libreoffice: Multiple heap-based buffer overflows in the XML manifest encryption handling code

Multiple heap-based buffer overflows in the XML manifest encryption tag parsing functionality in OpenOffice.org and LibreOffice before 3.5.5 allow remote attackers to cause a denial of service and possibly execute arbitrary code via a crafted Open Document Text (.odt) file with (1) a child tag within an incorrect parent tag, (2) duplicate tags, or (3) a Base64 ChecksumAttribute whose length is not evenly divisible by four.

CVSS 2.0 · 7.5 High EPSS 7.0% KEV · Not listed
Vendors
Apache Canonical Debian and 2 more
Products
Openoffice Ubuntu Linux Debian Linux and 8 more
CVE-2011-2713

openoffice.org: Out-of-bounds read in DOC sprm parser

oowriter in OpenOffice.org 3.3.0 and LibreOffice before 3.4.3 allows user-assisted remote attackers to cause a denial of service (crash) via a crafted DOC file that triggers an out-of-bounds read in the DOC sprm parser.

CVSS 2.0 · 4.3 Medium EPSS 2.9% KEV · Not listed
Vendors
Libreoffice Sun
Products
Libreoffice Openoffice.org
CVE-2012-0037

raptor: XML External Entity (XXE) attack via RDF files

Redland Raptor (aka libraptor) before 2.0.7, as used by OpenOffice 3.3 and 3.4 Beta, LibreOffice before 3.4.6 and 3.5.x before 3.5.1, and other products, allows user-assisted remote attackers to read arbitrary files via a crafted XML external entity (XXE) declaration and reference in an RDF document.

CVSS 3.1 · 6.5 Medium EPSS 13.5% KEV · Not listed
Vendors
Apache Debian Fedoraproject and 3 more
Products
Openoffice Debian Linux Fedora and 11 more
CVE-2012-1149

libreoffice: Integer overflows, leading to heap-buffer overflows in JPEG, PNG and BMP reader implementations

Integer overflow in the vclmi.dll module in OpenOffice.org (OOo) 3.3, 3.4 Beta, and possibly earlier, and LibreOffice before 3.5.3, allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a crafted embedded image object, as demonstrated by a JPEG image in a .DOC file, which triggers a heap-based buffer overflow.

CVSS 2.0 · 7.5 High EPSS 14.0% KEV · Not listed
Vendors
Apache Debian Fedoraproject and 2 more
Products
Openoffice.org Debian Linux Fedora and 7 more
CVE-2012-2334

libreoffice: Integer overflow leading to buffer overflow by processing invalid Escher graphics records length in the Powerpoint documents

Integer overflow in filter/source/msfilter/msdffimp.cxx in OpenOffice.org (OOo) 3.3, 3.4 Beta, and possibly earlier, and LibreOffice before 3.5.3, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via the length of an Escher graphics record in a PowerPoint (.ppt) document, which triggers a buffer overflow.

CVSS 2.0 · 6.8 Medium EPSS 13.4% KEV · Not listed
Vendors
Apache Libreoffice Redhat
Products
Openoffice.org Libreoffice Enterprise Linux
CVE-2011-2685

filter): Multiple stack buffer overflows when processing certain LWP files (VU#953183)

Stack-based buffer overflow in the Lotus Word Pro import filter in LibreOffice before 3.3.3 allows remote attackers to execute arbitrary code via a crafted .lwp file.

CVSS 2.0 · 9.3 Critical EPSS 7.0% KEV · Not listed
Vendors
Libreoffice
Products
Libreoffice
CVE-2012-4233

libreoffice: multiple null pointer dereference flaws

LibreOffice 3.5.x before 3.5.7.2 and 3.6.x before 3.6.1, and OpenOffice.org (OOo), allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted (1) odt file to vcllo.dll, (2) ODG (Drawing document) file to svxcorelo.dll, (3) PolyPolygon record in a .wmf (Window Meta File) file embedded in a ppt (PowerPoint) file to tllo.dll, or (4) xls (Excel) file to scfiltlo.dll.

CVSS 2.0 · 4.3 Medium EPSS 3.5% KEV · Not listed
Vendors
Libreoffice Sun
Products
Libreoffice Openoffice.org
CVE-2023-6186

Link targets allow arbitrary script execution

Insufficient macro permission validation of The Document Foundation LibreOffice allows an attacker to execute built-in macros without warning. In affected versions LibreOffice supports hyperlinks with macro or similar built-in command targets that can be executed when activated without warning the user.

CVSS 3.1 · 8.3 High EPSS < 1% KEV · Not listed
Vendors
Debian Fedoraproject Libreoffice and 1 more
Products
Debian Linux Fedora Libreoffice and 5 more
CVE-2023-6185

Improper input validation enabling arbitrary Gstreamer pipeline injection

Improper Input Validation vulnerability in GStreamer integration of The Document Foundation LibreOffice allows an attacker to execute arbitrary GStreamer plugins. In affected versions the filename of the embedded video is not sufficiently escaped when passed to GStreamer enabling an attacker to run arbitrary gstreamer plugins depending on what plugins are installed on the target system.

CVSS 3.1 · 8.3 High EPSS 1.0% KEV · Not listed
Vendors
Debian Fedoraproject Libreoffice and 1 more
Products
Debian Linux Fedora Libreoffice and 5 more