A buffer overflow vulnerability in LibreOffice

Description

An out-of-bounds write vulnerability was found in LibreOffice. By exploiting this vulnerability malicious users can possibly cause a denial of service or obtain sensitive information. This vulnerability can be exploited remotely.

---

Technical details

This vulnerability is related to the ReadJPEG function in vcl/source/filter/jpeg/jpegc.cxx.

An out-of-bounds write is caused by a heap-based overflow.

Original advisories

• ofz#889 readjust jpeg import

• libreoffice: Heap-buffer-overflow in null_convert

Related products

• LibreOffice

CVE list

• CVE-2017-8358
  critical

Read more

Find out the statistics of the vulnerabilities spreading in your region on statistics.securelist.com