Apache OpenOffice: Heap out-of-bounds write in WW8 PLCF reader

Özet

Türkçe özeti henüz hazır değil; şimdilik kaynağın kendi açıklamasını gösteriyoruz.

An out-of-bounds Write vulnerability in Apache OpenOffice versions through 4.1.16 could allow an attacker to craft a Microsoft Word document that would crash the program, or otherwise corrupt other memory areas.

Users are recommended to upgrade to version 4.1.17, which fixes this issue.

Etkilenen sürümler1 yazılım

Kaynaklar4 kaynak

• CVE.org kaydı
• NVD kaydı
• lists.apache.org/thread.html/xw6x0y35f3qlk4pqsc1pf0sv7481yvlk Üretici bülteni
• openwall.com/lists/oss-security/2026/11/03/24 Diğer

Kayıt geçmişi

1. 4 Kas 2026 17:40CVSS puanı değişti: – → 7.3
2. 4 Kas 2026 14:02Yayımlandı

İlgili açıklar

• 5,8 CVE-2026-59267Apache OpenOffice: Heap Buffer Overflow in DXF LWPOLYLINE import could cause memory corruption
• 5,5 CVE-2026-90632Apache OpenOffice: Local file inclusion via GStreamer plugin
• 7,3 CVE-2026-90634Apache OpenOffice: Out-of-bounds write when importing encrypted PDF files
• 3,3 CVE-2026-90631Apache OpenOffice: Remote document loaded without prompt, possibiy leaking environment variables
• 7,3 CVE-2026-90629Apache OpenOffice: Out of bounds memory access during WMF import
• 7,3 CVE-2026-90628Apache OpenOffice: Stack overflow in CFF hint handling