CVE-2018-10119
—CVSS 3.0
7.8 high
EPSS
2%p79
Published
()
Modified
Description
sot/source/sdstor/stgstrms.cxx in LibreOffice before 5.4.5.1 and 6.x before 6.0.1.1 uses an incorrect integer data type in the StgSmallStrm class, which allows remote attackers to cause a denial of service (use-after-free with write access) or possibly have unspecified other impact via a crafted document that uses the structured storage ole2 wrapper file format.
- Vendors
- libreofficedebianredhatcanonical
- Products
- libreoffice, debian linux, enterprise linux desktop, enterprise linux server, enterprise linux workstation, ubuntu linux
- Weakness
- CWE-416
- Vector
- CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
In the news0 stories
No ingested article mentions this CVE yet.