high7.8
CVE-2016-4324
Use-after-free vulnerability in LibreOffice before 5.1.4 allows remote attackers to execute arbitrary code via a crafted RTF file, related to stylesheet and su…
Impact
Use-after-free vulnerability in LibreOffice before 5.1.4 allows remote attackers to execute arbitrary code via a crafted RTF file, related to stylesheet and superscript tokens.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Debian | Debian Linux | Version 8.0 |
| Libreoffice | Libreoffice | through 5.1.3 |
| Canonical | Ubuntu Linux | Versions 12.04, 15.10, 16.04 |
Weakness classification
References
- NVD record
- CVE.org record
- http://www.debian.org/security/2016/dsa-3608
- http://www.libreoffice.org/about-us/security/advisories/cve-2016-4324/
- http://www.securityfocus.com/bid/91499
- http://www.securitytracker.com/id/1036209
- http://www.talosintelligence.com/reports/TALOS-2016-0126/
- http://www.ubuntu.com/usn/USN-3022-1
- https://security.gentoo.org/glsa/201611-03
- http://www.debian.org/security/2016/dsa-3608
- http://www.libreoffice.org/about-us/security/advisories/cve-2016-4324/
- http://www.securityfocus.com/bid/91499
- http://www.securitytracker.com/id/1036209
- http://www.talosintelligence.com/reports/TALOS-2016-0126/
- http://www.ubuntu.com/usn/USN-3022-1
- https://security.gentoo.org/glsa/201611-03