Open Source Vulnerabilities
libreoffice
LibreOffice has a feature where documents can specify that pre-installed scripts can be executed on various document events such as mouse-over, etc
libreoffice
LibreOffice has a feature where documents can specify that pre-installed scripts can be executed on various document events such as mouse-over, etc
openexr
flaw was found in OpenEXR in versions before 3
openexr
flaw was found in OpenEXR in versions before 3
tiff
TIFFWriteDirectorySec() function in tif_dirwrite
libreoffice
LibreOffice has a feature where documents can specify that pre-installed macros can be executed on various script events such as mouse-over, document-open etc
libreoffice
LibreOffice has a feature where documents can specify that pre-installed macros can be executed on various script events such as mouse-over, document-open etc
openexr
integer overflow leading to a heap-buffer overflow was found in OpenEXR in versions before 3
openexr
integer overflow leading to a heap-buffer overflow was found in OpenEXR in versions before 3
libreoffice
LibreOffice is typically bundled with LibreLogo, a programmable turtle vector graphics script, which can execute arbitrary python commands contained with the document it is launched from
libreoffice
LibreOffice is typically bundled with LibreLogo, a programmable turtle vector graphics script, which can execute arbitrary python commands contained with the document it is launched from
openexr
integer overflow leading to a heap-buffer overflow was found in the DwaCompressor of OpenEXR in versions before 3
openexr
integer overflow leading to a heap-buffer overflow was found in the DwaCompressor of OpenEXR in versions before 3
libreoffice
LibreOffice is typically bundled with LibreLogo, a programmable turtle vector graphics script, which can execute arbitrary python commands contained with the document it is launched from
libreoffice
LibreOffice is typically bundled with LibreLogo, a programmable turtle vector graphics script, which can execute arbitrary python commands contained with the document it is launched from
openexr
integer overflow leading to a heap-buffer overflow was found in the DwaCompressor of OpenEXR in versions before 3
openexr
integer overflow leading to a heap-buffer overflow was found in the DwaCompressor of OpenEXR in versions before 3
libreoffice
LibreOffice is typically bundled with LibreLogo, a programmable turtle vector graphics script, which can execute arbitrary python commands contained with the document it is launched from
libreoffice
LibreOffice is typically bundled with LibreLogo, a programmable turtle vector graphics script, which can execute arbitrary python commands contained with the document it is launched from
openexr
heap-buffer overflow was found in the copyIntoFrameBuffer function of OpenEXR in versions before 3
openexr
heap-buffer overflow was found in the copyIntoFrameBuffer function of OpenEXR in versions before 3
libreoffice
LibreOffice has a feature where documents can specify that pre-installed macros can be executed on various script events such as mouse-over, document-open etc
libreoffice
LibreOffice has a feature where documents can specify that pre-installed macros can be executed on various script events such as mouse-over, document-open etc
tiff
issue was discovered in LibTIFF 4
openexr
There's a flaw in OpenEXR's ImfDeepScanLineInputFile functionality in versions prior to 3
openexr
There's a flaw in OpenEXR's ImfDeepScanLineInputFile functionality in versions prior to 3
tiff
issue was discovered in LibTIFF 4
libreoffice
If LibreOffice has an encrypted document open and crashes, that document is auto-saved encrypted
libreoffice
If LibreOffice has an encrypted document open and crashes, that document is auto-saved encrypted
tiff
TIFFWriteScanline in tif_write
libreoffice
ODF documents can contain forms to be filled out by the user
libreoffice
ODF documents can contain forms to be filled out by the user
openexr
Due to a failure in validating the number of scanline samples of a OpenEXR file containing deep scanline data, Academy Software Foundation OpenEX image parsing library version 3
openexr
Due to a failure in validating the number of scanline samples of a OpenEXR file containing deep scanline data, Academy Software Foundation OpenEX image parsing library version 3
tiff
issue was discovered in LibTIFF 4
libreoffice
LibreOffice has a 'stealth mode' in which only documents from locations deemed 'trusted' are allowed to retrieve remote resources
libreoffice
LibreOffice has a 'stealth mode' in which only documents from locations deemed 'trusted' are allowed to retrieve remote resources
libreoffice
Improper Certificate Validation vulnerability in LibreOffice allowed an attacker to self sign an ODF document, with a signature untrusted by the target, then modify it to change the signature alg...
libreoffice
Improper Certificate Validation vulnerability in LibreOffice allowed an attacker to self sign an ODF document, with a signature untrusted by the target, then modify it to change the signature alg...
tiff
Heap-based buffer overflow in the cpSeparateBufToContigBuf function in tiffcp
tiff
Heap-based buffer overflow in the cpSeparateBufToContigBuf function in tiffcp
libreoffice
LibreOffice supports digital signatures of ODF documents and macros within documents, presenting visual aids that no alteration of the document occurred since the last signing and that the signatur...
libreoffice
LibreOffice supports digital signatures of ODF documents and macros within documents, presenting visual aids that no alteration of the document occurred since the last signing and that the signatur...
tiff
_TIFFCheckMalloc and _TIFFCheckRealloc in tif_aux
tiff
_TIFFCheckMalloc and _TIFFCheckRealloc in tif_aux
libreoffice
LibreOffice supports digital signatures of ODF documents and macros within documents, presenting visual aids that no alteration of the document occurred since the last signing and that the signatur...
libreoffice
LibreOffice supports digital signatures of ODF documents and macros within documents, presenting visual aids that no alteration of the document occurred since the last signing and that the signatur...
libreoffice
Security fix for CVE-2021-25632 applied in: libreoffice 7.2.2.2-r0
libreoffice
Security fix for CVE-2021-25632 applied in: libreoffice 7.2.2.2-r0
tiff
vulnerability has been identified in SCALANCE SC-600 (V2
tiff
vulnerability has been identified in SCALANCE SC-600 (V2
tiff
TIFFFdOpen function in tif_unix
libreoffice
In the LibreOffice 7-1 series in versions prior to 7
libreoffice
In the LibreOffice 7-1 series in versions prior to 7
libreoffice
LibreOffice supports digital signatures of ODF documents and macros within documents, presenting visual aids that no alteration of the document occurred since the last signing and that the signatur...
libreoffice
LibreOffice supports digital signatures of ODF documents and macros within documents, presenting visual aids that no alteration of the document occurred since the last signing and that the signatur...
tiff
heap-based buffer overflow flaw was found in libtiff in the handling of TIFF images in libtiff's TIFF2PDF tool
tiff
heap-based buffer overflow flaw was found in libtiff in the handling of TIFF images in libtiff's TIFF2PDF tool
tiff
integer overflow flaw was found in libtiff that exists in the tif_getimage
tiff
integer overflow flaw was found in libtiff that exists in the tif_getimage
libreoffice
LibreOffice supports the storage of passwords for web connections in the user’s configuration database
libreoffice
LibreOffice supports the storage of passwords for web connections in the user’s configuration database
tiff
In LibTIFF, there is a memory malloc failure in tif_pixarlog
tiff
In LibTIFF, there is a memory malloc failure in tif_pixarlog
libreoffice
LibreOffice supports the storage of passwords for web connections in the user’s configuration database
libreoffice
LibreOffice supports the storage of passwords for web connections in the user’s configuration database
tiff
flaw was found in libtiff
libreoffice
Improper Certificate Validation vulnerability in LibreOffice existed where determining if a macro was signed by a trusted author was done by only matching the serial number and issuer string of the...
libreoffice
Improper Certificate Validation vulnerability in LibreOffice existed where determining if a macro was signed by a trusted author was done by only matching the serial number and issuer string of the...
libreoffice
LibreOffice supports Office URI Schemes to enable browser integration of LibreOffice with MS SharePoint server
libreoffice
LibreOffice supports Office URI Schemes to enable browser integration of LibreOffice with MS SharePoint server
libreoffice
Unchecked script execution in Graphic on-click binding in affected LibreOffice versions allows an attacker to create a document which without prompt will execute scripts built-into LibreOffice on c...
libreoffice
Unchecked script execution in Graphic on-click binding in affected LibreOffice versions allows an attacker to create a document which without prompt will execute scripts built-into LibreOffice on c...
tiff
Out-of-bounds Read error in tiffcp in libtiff 4
tiff
Divide By Zero error in tiffcrop in libtiff 4
