Summary
This host is installed with LibreOffice and is prone to multiple buffer overflow vulnerabilities.
Impact
Successful exploitation will allow remote attackers to execute arbitrary code.
Impact Level: System/Application.
Solution
Upgrade to LibreOffice version 3.3.3 or 3.4.0 or later.
For updates refer to http://www.libreoffice.org/download/
Insight
The flaws are due to errors in the import filter when processing Lotus Word Pro (LWP) files and can be exploited to cause a stack-based buffer overflow via a specially crafted file.
Affected
LibreOffice version prior to 3.3.3
References
Updated on 2015-03-25
Severity
Classification
-
CVE CVE-2011-2685 -
CVSS Base Score: 9.3
AV:N/AC:M/Au:N/C:C/I:C/A:C
Related Vulnerabilities
- Adobe Flash Player Buffer Overflow Vulnerability (Windows)
- CA ARCserve Backup Multiple Bufffer Overflow Vulnerabilities
- Avaya WinPDM Multiple Buffer Overflow Vulnerabilities
- Adobe Reader 'File Extension' Buffer Overflow Vulnerability (Windows)
- Adobe Reader '/Registry' and '/Ordering' Buffer Overflow Vulnerability (Win)