Integer overflow in LibreOffice before 4.4.5 and Apache OpenOffice before 4.1.2 allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via a long DOC file, which triggers a buffer overflow.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Ubuntu_linux | Canonical | 12.04 (including) | 12.04 (including) |
| Ubuntu_linux | Canonical | 14.04 (including) | 14.04 (including) |
| Ubuntu_linux | Canonical | 15.04 (including) | 15.04 (including) |
| Debian_linux | Debian | 7.0 (including) | 7.0 (including) |
| Debian_linux | Debian | 8.0 (including) | 8.0 (including) |
| Libreoffice | Ubuntu | precise | * |
| Libreoffice | Ubuntu | trusty | * |
| Libreoffice | Ubuntu | vivid | * |
| Red Hat Enterprise Linux 6 | RedHat | libreoffice-1:4.2.8.2-11.el6_7.1 | * |
| Red Hat Enterprise Linux 7 | RedHat | libreoffice-1:4.3.7.2-5.el7_2.1 | * |