Apache OpenOffice: Stack overflow in CFF hint handling

Özet

Türkçe özeti henüz hazır değil; şimdilik kaynağın kendi açıklamasını gösteriyoruz.

An uncontrolled memory access in the PDF export code of Apache OpenOffice versions through 4.1.16 allows a crafted CFF font to cause a stack overflow problem, causing program crash or memory corruption, or even running other code.

Users are recommended to upgrade to version 4.1.17, which fixes this issue.

Etkilenen sürümler1 yazılım

Kaynaklar4 kaynak

• CVE.org kaydı
• NVD kaydı
• lists.apache.org/thread.html/15onpdrzqny5y5qtmdv4lnvptxlvmg05 Üretici bülteni
• openwall.com/lists/oss-security/2026/11/03/28 Diğer

Kayıt geçmişi

1. 4 Kas 2026 17:30CVSS puanı değişti: – → 7.3
2. 4 Kas 2026 14:03Yayımlandı

İlgili açıklar

• 5,8 CVE-2026-59267Apache OpenOffice: Heap Buffer Overflow in DXF LWPOLYLINE import could cause memory corruption
• 7,3 CVE-2026-90634Apache OpenOffice: Out-of-bounds write when importing encrypted PDF files
• 3,3 CVE-2026-90631Apache OpenOffice: Remote document loaded without prompt, possibiy leaking environment variables
• 7,3 CVE-2026-90629Apache OpenOffice: Out of bounds memory access during WMF import
• 5,5 CVE-2026-90627Apache OpenOffice: Local file inclusion via SQL provider and flat file database references
• 7,3 CVE-2026-90626Apache OpenOffice: Out-of-bounds write when importing encrypted PDF files