CVE-2017-7870 - LibreOffice before 2017-01-02 has an out-of-bounds write caused by a heap-based buffer overflow rela

CVE-2017-7870

Summary

LibreOffice before 2017-01-02 has an out-of-bounds write caused by a heap-based buffer overflow related to the tools::Polygon::Insert function in tools/source/generic/poly.cxx.

References

Vulnerable Configurations

cpe:2.3:a:libreoffice:libreoffice:3.6.0.0:beta2:*:*:*:*:*:*
cpe:2.3:a:libreoffice:libreoffice:3.6.0.0:beta2:*:*:*:*:*:*
cpe:2.3:a:libreoffice:libreoffice:4.0.0.0:beta2:*:*:*:*:*:*
cpe:2.3:a:libreoffice:libreoffice:4.0.0.0:beta2:*:*:*:*:*:*
cpe:2.3:a:libreoffice:libreoffice:4.1.0.0:beta2:*:*:*:*:*:*
cpe:2.3:a:libreoffice:libreoffice:4.1.0.0:beta2:*:*:*:*:*:*
cpe:2.3:a:libreoffice:libreoffice:4.2.0.0:beta2:*:*:*:*:*:*
cpe:2.3:a:libreoffice:libreoffice:4.2.0.0:beta2:*:*:*:*:*:*
cpe:2.3:a:libreoffice:libreoffice:4.3.0.0:beta2:*:*:*:*:*:*
cpe:2.3:a:libreoffice:libreoffice:4.3.0.0:beta2:*:*:*:*:*:*
cpe:2.3:a:libreoffice:libreoffice:4.4.0.0:beta2:*:*:*:*:*:*
cpe:2.3:a:libreoffice:libreoffice:4.4.0.0:beta2:*:*:*:*:*:*
cpe:2.3:a:libreoffice:libreoffice:5.0.0.0:beta2:*:*:*:*:*:*
cpe:2.3:a:libreoffice:libreoffice:5.0.0.0:beta2:*:*:*:*:*:*
cpe:2.3:a:libreoffice:libreoffice:5.1.0.0:beta2:*:*:*:*:*:*
cpe:2.3:a:libreoffice:libreoffice:5.1.0.0:beta2:*:*:*:*:*:*
cpe:2.3:a:libreoffice:libreoffice:5.2.0.0:beta2:*:*:*:*:*:*
cpe:2.3:a:libreoffice:libreoffice:5.2.0.0:beta2:*:*:*:*:*:*
cpe:2.3:a:libreoffice:libreoffice:5.3.0.0:beta2:*:*:*:*:*:*
cpe:2.3:a:libreoffice:libreoffice:5.3.0.0:beta2:*:*:*:*:*:*

CVSS

Base:	7.5 (as of 05-01-2018 - 02:31)
Impact:
Exploitability:

CWE

CWE-787

CAPEC

Access

Vector	Complexity	Authentication
NETWORK	LOW	NONE

Impact

Confidentiality	Integrity	Availability
PARTIAL	PARTIAL	PARTIAL

cvss-vector via4

AV:N/AC:L/Au:N/C:P/I:P/A:P

redhat via4

advisories

bugzilla

id	1454693
title	Segmentation fault after clicking gnome-documents back button while presentation is being slowly loaded

oval

comment Red Hat Enterprise Linux must be installed
oval oval:com.redhat.rhba:tst:20070304026

AND

comment Red Hat Enterprise Linux 7 is installed
oval oval:com.redhat.rhba:tst:20150364027

AND
comment autocorr-af is earlier than 1:5.0.6.2-14.el7
oval oval:com.redhat.rhsa:tst:20171975001
comment autocorr-af is signed with Red Hat redhatrelease2 key
oval oval:com.redhat.rhba:tst:20152197098
AND
comment autocorr-bg is earlier than 1:5.0.6.2-14.el7
oval oval:com.redhat.rhsa:tst:20171975003
comment autocorr-bg is signed with Red Hat redhatrelease2 key
oval oval:com.redhat.rhba:tst:20152197100
AND
comment autocorr-ca is earlier than 1:5.0.6.2-14.el7
oval oval:com.redhat.rhsa:tst:20171975005
comment autocorr-ca is signed with Red Hat redhatrelease2 key
oval oval:com.redhat.rhba:tst:20152197102
AND
comment autocorr-cs is earlier than 1:5.0.6.2-14.el7
oval oval:com.redhat.rhsa:tst:20171975007
comment autocorr-cs is signed with Red Hat redhatrelease2 key
oval oval:com.redhat.rhba:tst:20152197104
AND
comment autocorr-da is earlier than 1:5.0.6.2-14.el7
oval oval:com.redhat.rhsa:tst:20171975009
comment autocorr-da is signed with Red Hat redhatrelease2 key
oval oval:com.redhat.rhba:tst:20152197106
AND
comment autocorr-de is earlier than 1:5.0.6.2-14.el7
oval oval:com.redhat.rhsa:tst:20171975011
comment autocorr-de is signed with Red Hat redhatrelease2 key
oval oval:com.redhat.rhba:tst:20152197108
AND
comment autocorr-en is earlier than 1:5.0.6.2-14.el7
oval oval:com.redhat.rhsa:tst:20171975013
comment autocorr-en is signed with Red Hat redhatrelease2 key
oval oval:com.redhat.rhba:tst:20152197110
AND
comment autocorr-es is earlier than 1:5.0.6.2-14.el7
oval oval:com.redhat.rhsa:tst:20171975015
comment autocorr-es is signed with Red Hat redhatrelease2 key
oval oval:com.redhat.rhba:tst:20152197112
AND
comment autocorr-fa is earlier than 1:5.0.6.2-14.el7
oval oval:com.redhat.rhsa:tst:20171975017
comment autocorr-fa is signed with Red Hat redhatrelease2 key
oval oval:com.redhat.rhba:tst:20152197114
AND
comment autocorr-fi is earlier than 1:5.0.6.2-14.el7
oval oval:com.redhat.rhsa:tst:20171975019
comment autocorr-fi is signed with Red Hat redhatrelease2 key
oval oval:com.redhat.rhba:tst:20152197116
AND
comment autocorr-fr is earlier than 1:5.0.6.2-14.el7
oval oval:com.redhat.rhsa:tst:20171975021
comment autocorr-fr is signed with Red Hat redhatrelease2 key
oval oval:com.redhat.rhba:tst:20152197118
AND
comment autocorr-ga is earlier than 1:5.0.6.2-14.el7
oval oval:com.redhat.rhsa:tst:20171975023
comment autocorr-ga is signed with Red Hat redhatrelease2 key
oval oval:com.redhat.rhba:tst:20152197120
AND
comment autocorr-hr is earlier than 1:5.0.6.2-14.el7
oval oval:com.redhat.rhsa:tst:20171975025
comment autocorr-hr is signed with Red Hat redhatrelease2 key
oval oval:com.redhat.rhba:tst:20152197122
AND
comment autocorr-hu is earlier than 1:5.0.6.2-14.el7
oval oval:com.redhat.rhsa:tst:20171975027
comment autocorr-hu is signed with Red Hat redhatrelease2 key
oval oval:com.redhat.rhba:tst:20152197124
AND
comment autocorr-is is earlier than 1:5.0.6.2-14.el7
oval oval:com.redhat.rhsa:tst:20171975029
comment autocorr-is is signed with Red Hat redhatrelease2 key
oval oval:com.redhat.rhba:tst:20152197126
AND
comment autocorr-it is earlier than 1:5.0.6.2-14.el7
oval oval:com.redhat.rhsa:tst:20171975031
comment autocorr-it is signed with Red Hat redhatrelease2 key
oval oval:com.redhat.rhba:tst:20152197128
AND
comment autocorr-ja is earlier than 1:5.0.6.2-14.el7
oval oval:com.redhat.rhsa:tst:20171975033
comment autocorr-ja is signed with Red Hat redhatrelease2 key
oval oval:com.redhat.rhba:tst:20152197130
AND
comment autocorr-ko is earlier than 1:5.0.6.2-14.el7
oval oval:com.redhat.rhsa:tst:20171975035
comment autocorr-ko is signed with Red Hat redhatrelease2 key
oval oval:com.redhat.rhba:tst:20152197132
AND
comment autocorr-lb is earlier than 1:5.0.6.2-14.el7
oval oval:com.redhat.rhsa:tst:20171975037
comment autocorr-lb is signed with Red Hat redhatrelease2 key
oval oval:com.redhat.rhba:tst:20152197134
AND
comment autocorr-lt is earlier than 1:5.0.6.2-14.el7
oval oval:com.redhat.rhsa:tst:20171975039
comment autocorr-lt is signed with Red Hat redhatrelease2 key
oval oval:com.redhat.rhba:tst:20152197136
AND
comment autocorr-mn is earlier than 1:5.0.6.2-14.el7
oval oval:com.redhat.rhsa:tst:20171975041
comment autocorr-mn is signed with Red Hat redhatrelease2 key
oval oval:com.redhat.rhba:tst:20152197138
AND
comment autocorr-nl is earlier than 1:5.0.6.2-14.el7
oval oval:com.redhat.rhsa:tst:20171975043
comment autocorr-nl is signed with Red Hat redhatrelease2 key
oval oval:com.redhat.rhba:tst:20152197140
AND
comment autocorr-pl is earlier than 1:5.0.6.2-14.el7
oval oval:com.redhat.rhsa:tst:20171975045
comment autocorr-pl is signed with Red Hat redhatrelease2 key
oval oval:com.redhat.rhba:tst:20152197142
AND
comment autocorr-pt is earlier than 1:5.0.6.2-14.el7
oval oval:com.redhat.rhsa:tst:20171975047
comment autocorr-pt is signed with Red Hat redhatrelease2 key
oval oval:com.redhat.rhba:tst:20152197144
AND
comment autocorr-ro is earlier than 1:5.0.6.2-14.el7
oval oval:com.redhat.rhsa:tst:20171975049
comment autocorr-ro is signed with Red Hat redhatrelease2 key
oval oval:com.redhat.rhba:tst:20152197146
AND
comment autocorr-ru is earlier than 1:5.0.6.2-14.el7
oval oval:com.redhat.rhsa:tst:20171975051
comment autocorr-ru is signed with Red Hat redhatrelease2 key
oval oval:com.redhat.rhba:tst:20152197148
AND
comment autocorr-sk is earlier than 1:5.0.6.2-14.el7
oval oval:com.redhat.rhsa:tst:20171975053
comment autocorr-sk is signed with Red Hat redhatrelease2 key
oval oval:com.redhat.rhba:tst:20152197150
AND
comment autocorr-sl is earlier than 1:5.0.6.2-14.el7
oval oval:com.redhat.rhsa:tst:20171975055
comment autocorr-sl is signed with Red Hat redhatrelease2 key
oval oval:com.redhat.rhba:tst:20152197152
AND
comment autocorr-sr is earlier than 1:5.0.6.2-14.el7
oval oval:com.redhat.rhsa:tst:20171975057
comment autocorr-sr is signed with Red Hat redhatrelease2 key
oval oval:com.redhat.rhba:tst:20152197154
AND
comment autocorr-sv is earlier than 1:5.0.6.2-14.el7
oval oval:com.redhat.rhsa:tst:20171975059
comment autocorr-sv is signed with Red Hat redhatrelease2 key
oval oval:com.redhat.rhba:tst:20152197156
AND
comment autocorr-tr is earlier than 1:5.0.6.2-14.el7
oval oval:com.redhat.rhsa:tst:20171975061
comment autocorr-tr is signed with Red Hat redhatrelease2 key
oval oval:com.redhat.rhba:tst:20152197158
AND
comment autocorr-vi is earlier than 1:5.0.6.2-14.el7
oval oval:com.redhat.rhsa:tst:20171975063
comment autocorr-vi is signed with Red Hat redhatrelease2 key
oval oval:com.redhat.rhba:tst:20152197160
AND
comment autocorr-zh is earlier than 1:5.0.6.2-14.el7
oval oval:com.redhat.rhsa:tst:20171975065
comment autocorr-zh is signed with Red Hat redhatrelease2 key
oval oval:com.redhat.rhba:tst:20152197162
AND
comment libreoffice is earlier than 1:5.0.6.2-14.el7
oval oval:com.redhat.rhsa:tst:20171975067
comment libreoffice is signed with Red Hat redhatrelease2 key
oval oval:com.redhat.rhba:tst:20152197164

AND

comment libreoffice-base is earlier than 1:5.0.6.2-14.el7
oval oval:com.redhat.rhsa:tst:20171975069
comment libreoffice-base is signed with Red Hat redhatrelease2 key
oval oval:com.redhat.rhba:tst:20152197166

AND

comment libreoffice-bsh is earlier than 1:5.0.6.2-14.el7
oval oval:com.redhat.rhsa:tst:20171975071
comment libreoffice-bsh is signed with Red Hat redhatrelease2 key
oval oval:com.redhat.rhba:tst:20152197168

AND

comment libreoffice-calc is earlier than 1:5.0.6.2-14.el7
oval oval:com.redhat.rhsa:tst:20171975073
comment libreoffice-calc is signed with Red Hat redhatrelease2 key
oval oval:com.redhat.rhba:tst:20152197170

AND

comment libreoffice-core is earlier than 1:5.0.6.2-14.el7
oval oval:com.redhat.rhsa:tst:20171975075
comment libreoffice-core is signed with Red Hat redhatrelease2 key
oval oval:com.redhat.rhba:tst:20152197172

AND

comment libreoffice-draw is earlier than 1:5.0.6.2-14.el7
oval oval:com.redhat.rhsa:tst:20171975077
comment libreoffice-draw is signed with Red Hat redhatrelease2 key
oval oval:com.redhat.rhba:tst:20152197174

AND

comment libreoffice-emailmerge is earlier than 1:5.0.6.2-14.el7
oval oval:com.redhat.rhsa:tst:20171975079
comment libreoffice-emailmerge is signed with Red Hat redhatrelease2 key
oval oval:com.redhat.rhba:tst:20152197176

AND

comment libreoffice-filters is earlier than 1:5.0.6.2-14.el7
oval oval:com.redhat.rhsa:tst:20171975081
comment libreoffice-filters is signed with Red Hat redhatrelease2 key
oval oval:com.redhat.rhba:tst:20152197178

AND

comment libreoffice-gdb-debug-support is earlier than 1:5.0.6.2-14.el7
oval oval:com.redhat.rhsa:tst:20171975083
comment libreoffice-gdb-debug-support is signed with Red Hat redhatrelease2 key
oval oval:com.redhat.rhba:tst:20152197180

AND

comment libreoffice-glade is earlier than 1:5.0.6.2-14.el7
oval oval:com.redhat.rhsa:tst:20171975085
comment libreoffice-glade is signed with Red Hat redhatrelease2 key
oval oval:com.redhat.rhba:tst:20152197182

AND

comment libreoffice-graphicfilter is earlier than 1:5.0.6.2-14.el7
oval oval:com.redhat.rhsa:tst:20171975087
comment libreoffice-graphicfilter is signed with Red Hat redhatrelease2 key
oval oval:com.redhat.rhba:tst:20152197184

AND

comment libreoffice-impress is earlier than 1:5.0.6.2-14.el7
oval oval:com.redhat.rhsa:tst:20171975089
comment libreoffice-impress is signed with Red Hat redhatrelease2 key
oval oval:com.redhat.rhba:tst:20152197188

AND

comment libreoffice-langpack-af is earlier than 1:5.0.6.2-14.el7
oval oval:com.redhat.rhsa:tst:20171975091
comment libreoffice-langpack-af is signed with Red Hat redhatrelease2 key
oval oval:com.redhat.rhba:tst:20152197190

AND

comment libreoffice-langpack-ar is earlier than 1:5.0.6.2-14.el7
oval oval:com.redhat.rhsa:tst:20171975093
comment libreoffice-langpack-ar is signed with Red Hat redhatrelease2 key
oval oval:com.redhat.rhba:tst:20152197192

AND

comment libreoffice-langpack-as is earlier than 1:5.0.6.2-14.el7
oval oval:com.redhat.rhsa:tst:20171975095
comment libreoffice-langpack-as is signed with Red Hat redhatrelease2 key
oval oval:com.redhat.rhba:tst:20152197194

AND

comment libreoffice-langpack-bg is earlier than 1:5.0.6.2-14.el7
oval oval:com.redhat.rhsa:tst:20171975097
comment libreoffice-langpack-bg is signed with Red Hat redhatrelease2 key
oval oval:com.redhat.rhba:tst:20152197196

AND

comment libreoffice-langpack-bn is earlier than 1:5.0.6.2-14.el7
oval oval:com.redhat.rhsa:tst:20171975099
comment libreoffice-langpack-bn is signed with Red Hat redhatrelease2 key
oval oval:com.redhat.rhba:tst:20152197198

AND

comment libreoffice-langpack-br is earlier than 1:5.0.6.2-14.el7
oval oval:com.redhat.rhsa:tst:20171975101
comment libreoffice-langpack-br is signed with Red Hat redhatrelease2 key
oval oval:com.redhat.rhba:tst:20152197200

AND

comment libreoffice-langpack-ca is earlier than 1:5.0.6.2-14.el7
oval oval:com.redhat.rhsa:tst:20171975103
comment libreoffice-langpack-ca is signed with Red Hat redhatrelease2 key
oval oval:com.redhat.rhba:tst:20152197202

AND

comment libreoffice-langpack-cs is earlier than 1:5.0.6.2-14.el7
oval oval:com.redhat.rhsa:tst:20171975105
comment libreoffice-langpack-cs is signed with Red Hat redhatrelease2 key
oval oval:com.redhat.rhba:tst:20152197204

AND

comment libreoffice-langpack-cy is earlier than 1:5.0.6.2-14.el7
oval oval:com.redhat.rhsa:tst:20171975107
comment libreoffice-langpack-cy is signed with Red Hat redhatrelease2 key
oval oval:com.redhat.rhba:tst:20152197206

AND

comment libreoffice-langpack-da is earlier than 1:5.0.6.2-14.el7
oval oval:com.redhat.rhsa:tst:20171975109
comment libreoffice-langpack-da is signed with Red Hat redhatrelease2 key
oval oval:com.redhat.rhba:tst:20152197208

AND

comment libreoffice-langpack-de is earlier than 1:5.0.6.2-14.el7
oval oval:com.redhat.rhsa:tst:20171975111
comment libreoffice-langpack-de is signed with Red Hat redhatrelease2 key
oval oval:com.redhat.rhba:tst:20152197210

AND

comment libreoffice-langpack-dz is earlier than 1:5.0.6.2-14.el7
oval oval:com.redhat.rhsa:tst:20171975113
comment libreoffice-langpack-dz is signed with Red Hat redhatrelease2 key
oval oval:com.redhat.rhba:tst:20152197212

AND

comment libreoffice-langpack-el is earlier than 1:5.0.6.2-14.el7
oval oval:com.redhat.rhsa:tst:20171975115
comment libreoffice-langpack-el is signed with Red Hat redhatrelease2 key
oval oval:com.redhat.rhba:tst:20152197214

AND

comment libreoffice-langpack-en is earlier than 1:5.0.6.2-14.el7
oval oval:com.redhat.rhsa:tst:20171975117
comment libreoffice-langpack-en is signed with Red Hat redhatrelease2 key
oval oval:com.redhat.rhba:tst:20152197216

AND

comment libreoffice-langpack-es is earlier than 1:5.0.6.2-14.el7
oval oval:com.redhat.rhsa:tst:20171975119
comment libreoffice-langpack-es is signed with Red Hat redhatrelease2 key
oval oval:com.redhat.rhba:tst:20152197218

AND

comment libreoffice-langpack-et is earlier than 1:5.0.6.2-14.el7
oval oval:com.redhat.rhsa:tst:20171975121
comment libreoffice-langpack-et is signed with Red Hat redhatrelease2 key
oval oval:com.redhat.rhba:tst:20152197220

AND

comment libreoffice-langpack-eu is earlier than 1:5.0.6.2-14.el7
oval oval:com.redhat.rhsa:tst:20171975123
comment libreoffice-langpack-eu is signed with Red Hat redhatrelease2 key
oval oval:com.redhat.rhba:tst:20152197222

AND

comment libreoffice-langpack-fa is earlier than 1:5.0.6.2-14.el7
oval oval:com.redhat.rhsa:tst:20171975125
comment libreoffice-langpack-fa is signed with Red Hat redhatrelease2 key
oval oval:com.redhat.rhba:tst:20152197224

AND

comment libreoffice-langpack-fi is earlier than 1:5.0.6.2-14.el7
oval oval:com.redhat.rhsa:tst:20171975127
comment libreoffice-langpack-fi is signed with Red Hat redhatrelease2 key
oval oval:com.redhat.rhba:tst:20152197226

AND

comment libreoffice-langpack-fr is earlier than 1:5.0.6.2-14.el7
oval oval:com.redhat.rhsa:tst:20171975129
comment libreoffice-langpack-fr is signed with Red Hat redhatrelease2 key
oval oval:com.redhat.rhba:tst:20152197228

AND

comment libreoffice-langpack-ga is earlier than 1:5.0.6.2-14.el7
oval oval:com.redhat.rhsa:tst:20171975131
comment libreoffice-langpack-ga is signed with Red Hat redhatrelease2 key
oval oval:com.redhat.rhba:tst:20152197230

AND

comment libreoffice-langpack-gl is earlier than 1:5.0.6.2-14.el7
oval oval:com.redhat.rhsa:tst:20171975133
comment libreoffice-langpack-gl is signed with Red Hat redhatrelease2 key
oval oval:com.redhat.rhba:tst:20152197232

AND

comment libreoffice-langpack-gu is earlier than 1:5.0.6.2-14.el7
oval oval:com.redhat.rhsa:tst:20171975135
comment libreoffice-langpack-gu is signed with Red Hat redhatrelease2 key
oval oval:com.redhat.rhba:tst:20152197234

AND

comment libreoffice-langpack-he is earlier than 1:5.0.6.2-14.el7
oval oval:com.redhat.rhsa:tst:20171975137
comment libreoffice-langpack-he is signed with Red Hat redhatrelease2 key
oval oval:com.redhat.rhba:tst:20152197236

AND

comment libreoffice-langpack-hi is earlier than 1:5.0.6.2-14.el7
oval oval:com.redhat.rhsa:tst:20171975139
comment libreoffice-langpack-hi is signed with Red Hat redhatrelease2 key
oval oval:com.redhat.rhba:tst:20152197238

AND

comment libreoffice-langpack-hr is earlier than 1:5.0.6.2-14.el7
oval oval:com.redhat.rhsa:tst:20171975141
comment libreoffice-langpack-hr is signed with Red Hat redhatrelease2 key
oval oval:com.redhat.rhba:tst:20152197240

AND

comment libreoffice-langpack-hu is earlier than 1:5.0.6.2-14.el7
oval oval:com.redhat.rhsa:tst:20171975143
comment libreoffice-langpack-hu is signed with Red Hat redhatrelease2 key
oval oval:com.redhat.rhba:tst:20152197242

AND

comment libreoffice-langpack-it is earlier than 1:5.0.6.2-14.el7
oval oval:com.redhat.rhsa:tst:20171975145
comment libreoffice-langpack-it is signed with Red Hat redhatrelease2 key
oval oval:com.redhat.rhba:tst:20152197244

AND

comment libreoffice-langpack-ja is earlier than 1:5.0.6.2-14.el7
oval oval:com.redhat.rhsa:tst:20171975147
comment libreoffice-langpack-ja is signed with Red Hat redhatrelease2 key
oval oval:com.redhat.rhba:tst:20152197246

AND

comment libreoffice-langpack-kk is earlier than 1:5.0.6.2-14.el7
oval oval:com.redhat.rhsa:tst:20171975149
comment libreoffice-langpack-kk is signed with Red Hat redhatrelease2 key
oval oval:com.redhat.rhba:tst:20152197248

AND

comment libreoffice-langpack-kn is earlier than 1:5.0.6.2-14.el7
oval oval:com.redhat.rhsa:tst:20171975151
comment libreoffice-langpack-kn is signed with Red Hat redhatrelease2 key
oval oval:com.redhat.rhba:tst:20152197250

AND

comment libreoffice-langpack-ko is earlier than 1:5.0.6.2-14.el7
oval oval:com.redhat.rhsa:tst:20171975153
comment libreoffice-langpack-ko is signed with Red Hat redhatrelease2 key
oval oval:com.redhat.rhba:tst:20152197252

AND

comment libreoffice-langpack-lt is earlier than 1:5.0.6.2-14.el7
oval oval:com.redhat.rhsa:tst:20171975155
comment libreoffice-langpack-lt is signed with Red Hat redhatrelease2 key
oval oval:com.redhat.rhba:tst:20152197254

AND

comment libreoffice-langpack-lv is earlier than 1:5.0.6.2-14.el7
oval oval:com.redhat.rhsa:tst:20171975157
comment libreoffice-langpack-lv is signed with Red Hat redhatrelease2 key
oval oval:com.redhat.rhba:tst:20152197256

AND

comment libreoffice-langpack-mai is earlier than 1:5.0.6.2-14.el7
oval oval:com.redhat.rhsa:tst:20171975159
comment libreoffice-langpack-mai is signed with Red Hat redhatrelease2 key
oval oval:com.redhat.rhba:tst:20152197258

AND

comment libreoffice-langpack-ml is earlier than 1:5.0.6.2-14.el7
oval oval:com.redhat.rhsa:tst:20171975161
comment libreoffice-langpack-ml is signed with Red Hat redhatrelease2 key
oval oval:com.redhat.rhba:tst:20152197260

AND

comment libreoffice-langpack-mr is earlier than 1:5.0.6.2-14.el7
oval oval:com.redhat.rhsa:tst:20171975163
comment libreoffice-langpack-mr is signed with Red Hat redhatrelease2 key
oval oval:com.redhat.rhba:tst:20152197262

AND

comment libreoffice-langpack-nb is earlier than 1:5.0.6.2-14.el7
oval oval:com.redhat.rhsa:tst:20171975165
comment libreoffice-langpack-nb is signed with Red Hat redhatrelease2 key
oval oval:com.redhat.rhba:tst:20152197264

AND

comment libreoffice-langpack-nl is earlier than 1:5.0.6.2-14.el7
oval oval:com.redhat.rhsa:tst:20171975167
comment libreoffice-langpack-nl is signed with Red Hat redhatrelease2 key
oval oval:com.redhat.rhba:tst:20152197266

AND

comment libreoffice-langpack-nn is earlier than 1:5.0.6.2-14.el7
oval oval:com.redhat.rhsa:tst:20171975169
comment libreoffice-langpack-nn is signed with Red Hat redhatrelease2 key
oval oval:com.redhat.rhba:tst:20152197268

AND

comment libreoffice-langpack-nr is earlier than 1:5.0.6.2-14.el7
oval oval:com.redhat.rhsa:tst:20171975171
comment libreoffice-langpack-nr is signed with Red Hat redhatrelease2 key
oval oval:com.redhat.rhba:tst:20152197270

AND

comment libreoffice-langpack-nso is earlier than 1:5.0.6.2-14.el7
oval oval:com.redhat.rhsa:tst:20171975173
comment libreoffice-langpack-nso is signed with Red Hat redhatrelease2 key
oval oval:com.redhat.rhba:tst:20152197272

AND

comment libreoffice-langpack-or is earlier than 1:5.0.6.2-14.el7
oval oval:com.redhat.rhsa:tst:20171975175
comment libreoffice-langpack-or is signed with Red Hat redhatrelease2 key
oval oval:com.redhat.rhba:tst:20152197274

AND

comment libreoffice-langpack-pa is earlier than 1:5.0.6.2-14.el7
oval oval:com.redhat.rhsa:tst:20171975177
comment libreoffice-langpack-pa is signed with Red Hat redhatrelease2 key
oval oval:com.redhat.rhba:tst:20152197276

AND

comment libreoffice-langpack-pl is earlier than 1:5.0.6.2-14.el7
oval oval:com.redhat.rhsa:tst:20171975179
comment libreoffice-langpack-pl is signed with Red Hat redhatrelease2 key
oval oval:com.redhat.rhba:tst:20152197278

AND

comment libreoffice-langpack-pt-BR is earlier than 1:5.0.6.2-14.el7
oval oval:com.redhat.rhsa:tst:20171975181
comment libreoffice-langpack-pt-BR is signed with Red Hat redhatrelease2 key
oval oval:com.redhat.rhba:tst:20152197280

AND

comment libreoffice-langpack-pt-PT is earlier than 1:5.0.6.2-14.el7
oval oval:com.redhat.rhsa:tst:20171975183
comment libreoffice-langpack-pt-PT is signed with Red Hat redhatrelease2 key
oval oval:com.redhat.rhba:tst:20152197282

AND

comment libreoffice-langpack-ro is earlier than 1:5.0.6.2-14.el7
oval oval:com.redhat.rhsa:tst:20171975185
comment libreoffice-langpack-ro is signed with Red Hat redhatrelease2 key
oval oval:com.redhat.rhba:tst:20152197284

AND

comment libreoffice-langpack-ru is earlier than 1:5.0.6.2-14.el7
oval oval:com.redhat.rhsa:tst:20171975187
comment libreoffice-langpack-ru is signed with Red Hat redhatrelease2 key
oval oval:com.redhat.rhba:tst:20152197286

AND

comment libreoffice-langpack-si is earlier than 1:5.0.6.2-14.el7
oval oval:com.redhat.rhsa:tst:20171975189
comment libreoffice-langpack-si is signed with Red Hat redhatrelease2 key
oval oval:com.redhat.rhba:tst:20152197288

AND

comment libreoffice-langpack-sk is earlier than 1:5.0.6.2-14.el7
oval oval:com.redhat.rhsa:tst:20171975191
comment libreoffice-langpack-sk is signed with Red Hat redhatrelease2 key
oval oval:com.redhat.rhba:tst:20152197290

AND

comment libreoffice-langpack-sl is earlier than 1:5.0.6.2-14.el7
oval oval:com.redhat.rhsa:tst:20171975193
comment libreoffice-langpack-sl is signed with Red Hat redhatrelease2 key
oval oval:com.redhat.rhba:tst:20152197292

AND

comment libreoffice-langpack-sr is earlier than 1:5.0.6.2-14.el7
oval oval:com.redhat.rhsa:tst:20171975195
comment libreoffice-langpack-sr is signed with Red Hat redhatrelease2 key
oval oval:com.redhat.rhba:tst:20152197294

AND

comment libreoffice-langpack-ss is earlier than 1:5.0.6.2-14.el7
oval oval:com.redhat.rhsa:tst:20171975197
comment libreoffice-langpack-ss is signed with Red Hat redhatrelease2 key
oval oval:com.redhat.rhba:tst:20152197296

AND

comment libreoffice-langpack-st is earlier than 1:5.0.6.2-14.el7
oval oval:com.redhat.rhsa:tst:20171975199
comment libreoffice-langpack-st is signed with Red Hat redhatrelease2 key
oval oval:com.redhat.rhba:tst:20152197298

AND

comment libreoffice-langpack-sv is earlier than 1:5.0.6.2-14.el7
oval oval:com.redhat.rhsa:tst:20171975201
comment libreoffice-langpack-sv is signed with Red Hat redhatrelease2 key
oval oval:com.redhat.rhba:tst:20152197300

AND

comment libreoffice-langpack-ta is earlier than 1:5.0.6.2-14.el7
oval oval:com.redhat.rhsa:tst:20171975203
comment libreoffice-langpack-ta is signed with Red Hat redhatrelease2 key
oval oval:com.redhat.rhba:tst:20152197302

AND

comment libreoffice-langpack-te is earlier than 1:5.0.6.2-14.el7
oval oval:com.redhat.rhsa:tst:20171975205
comment libreoffice-langpack-te is signed with Red Hat redhatrelease2 key
oval oval:com.redhat.rhba:tst:20152197304

AND

comment libreoffice-langpack-th is earlier than 1:5.0.6.2-14.el7
oval oval:com.redhat.rhsa:tst:20171975207
comment libreoffice-langpack-th is signed with Red Hat redhatrelease2 key
oval oval:com.redhat.rhba:tst:20152197306

AND

comment libreoffice-langpack-tn is earlier than 1:5.0.6.2-14.el7
oval oval:com.redhat.rhsa:tst:20171975209
comment libreoffice-langpack-tn is signed with Red Hat redhatrelease2 key
oval oval:com.redhat.rhba:tst:20152197308

AND

comment libreoffice-langpack-tr is earlier than 1:5.0.6.2-14.el7
oval oval:com.redhat.rhsa:tst:20171975211
comment libreoffice-langpack-tr is signed with Red Hat redhatrelease2 key
oval oval:com.redhat.rhba:tst:20152197310

AND

comment libreoffice-langpack-ts is earlier than 1:5.0.6.2-14.el7
oval oval:com.redhat.rhsa:tst:20171975213
comment libreoffice-langpack-ts is signed with Red Hat redhatrelease2 key
oval oval:com.redhat.rhba:tst:20152197312

AND

comment libreoffice-langpack-uk is earlier than 1:5.0.6.2-14.el7
oval oval:com.redhat.rhsa:tst:20171975215
comment libreoffice-langpack-uk is signed with Red Hat redhatrelease2 key
oval oval:com.redhat.rhba:tst:20152197314

AND

comment libreoffice-langpack-ve is earlier than 1:5.0.6.2-14.el7
oval oval:com.redhat.rhsa:tst:20171975217
comment libreoffice-langpack-ve is signed with Red Hat redhatrelease2 key
oval oval:com.redhat.rhba:tst:20152197316

AND

comment libreoffice-langpack-xh is earlier than 1:5.0.6.2-14.el7
oval oval:com.redhat.rhsa:tst:20171975219
comment libreoffice-langpack-xh is signed with Red Hat redhatrelease2 key
oval oval:com.redhat.rhba:tst:20152197318

AND

comment libreoffice-langpack-zh-Hans is earlier than 1:5.0.6.2-14.el7
oval oval:com.redhat.rhsa:tst:20171975221
comment libreoffice-langpack-zh-Hans is signed with Red Hat redhatrelease2 key
oval oval:com.redhat.rhba:tst:20152197320

AND

comment libreoffice-langpack-zh-Hant is earlier than 1:5.0.6.2-14.el7
oval oval:com.redhat.rhsa:tst:20171975223
comment libreoffice-langpack-zh-Hant is signed with Red Hat redhatrelease2 key
oval oval:com.redhat.rhba:tst:20152197322

AND

comment libreoffice-langpack-zu is earlier than 1:5.0.6.2-14.el7
oval oval:com.redhat.rhsa:tst:20171975225
comment libreoffice-langpack-zu is signed with Red Hat redhatrelease2 key
oval oval:com.redhat.rhba:tst:20152197324

AND

comment libreoffice-librelogo is earlier than 1:5.0.6.2-14.el7
oval oval:com.redhat.rhsa:tst:20171975227
comment libreoffice-librelogo is signed with Red Hat redhatrelease2 key
oval oval:com.redhat.rhba:tst:20152197326

AND

comment libreoffice-math is earlier than 1:5.0.6.2-14.el7
oval oval:com.redhat.rhsa:tst:20171975229
comment libreoffice-math is signed with Red Hat redhatrelease2 key
oval oval:com.redhat.rhba:tst:20152197328

AND

comment libreoffice-nlpsolver is earlier than 1:5.0.6.2-14.el7
oval oval:com.redhat.rhsa:tst:20171975231
comment libreoffice-nlpsolver is signed with Red Hat redhatrelease2 key
oval oval:com.redhat.rhba:tst:20152197330

AND

comment libreoffice-officebean is earlier than 1:5.0.6.2-14.el7
oval oval:com.redhat.rhsa:tst:20171975233
comment libreoffice-officebean is signed with Red Hat redhatrelease2 key
oval oval:com.redhat.rhba:tst:20152197332

AND

comment libreoffice-ogltrans is earlier than 1:5.0.6.2-14.el7
oval oval:com.redhat.rhsa:tst:20171975235
comment libreoffice-ogltrans is signed with Red Hat redhatrelease2 key
oval oval:com.redhat.rhba:tst:20152197334

AND

comment libreoffice-opensymbol-fonts is earlier than 1:5.0.6.2-14.el7
oval oval:com.redhat.rhsa:tst:20171975237
comment libreoffice-opensymbol-fonts is signed with Red Hat redhatrelease2 key
oval oval:com.redhat.rhba:tst:20152197336

AND

comment libreoffice-pdfimport is earlier than 1:5.0.6.2-14.el7
oval oval:com.redhat.rhsa:tst:20171975239
comment libreoffice-pdfimport is signed with Red Hat redhatrelease2 key
oval oval:com.redhat.rhba:tst:20152197338

AND

comment libreoffice-postgresql is earlier than 1:5.0.6.2-14.el7
oval oval:com.redhat.rhsa:tst:20171975241
comment libreoffice-postgresql is signed with Red Hat redhatrelease2 key
oval oval:com.redhat.rhba:tst:20152197340

AND

comment libreoffice-pyuno is earlier than 1:5.0.6.2-14.el7
oval oval:com.redhat.rhsa:tst:20171975243
comment libreoffice-pyuno is signed with Red Hat redhatrelease2 key
oval oval:com.redhat.rhba:tst:20152197342

AND

comment libreoffice-rhino is earlier than 1:5.0.6.2-14.el7
oval oval:com.redhat.rhsa:tst:20171975245
comment libreoffice-rhino is signed with Red Hat redhatrelease2 key
oval oval:com.redhat.rhba:tst:20152197344

AND

comment libreoffice-sdk is earlier than 1:5.0.6.2-14.el7
oval oval:com.redhat.rhsa:tst:20171975247
comment libreoffice-sdk is signed with Red Hat redhatrelease2 key
oval oval:com.redhat.rhba:tst:20152197346

AND

comment libreoffice-sdk-doc is earlier than 1:5.0.6.2-14.el7
oval oval:com.redhat.rhsa:tst:20171975249
comment libreoffice-sdk-doc is signed with Red Hat redhatrelease2 key
oval oval:com.redhat.rhba:tst:20152197348

AND

comment libreoffice-ure is earlier than 1:5.0.6.2-14.el7
oval oval:com.redhat.rhsa:tst:20171975251
comment libreoffice-ure is signed with Red Hat redhatrelease2 key
oval oval:com.redhat.rhba:tst:20152197350

AND

comment libreoffice-wiki-publisher is earlier than 1:5.0.6.2-14.el7
oval oval:com.redhat.rhsa:tst:20171975253
comment libreoffice-wiki-publisher is signed with Red Hat redhatrelease2 key
oval oval:com.redhat.rhba:tst:20152197352

AND

comment libreoffice-writer is earlier than 1:5.0.6.2-14.el7
oval oval:com.redhat.rhsa:tst:20171975255
comment libreoffice-writer is signed with Red Hat redhatrelease2 key
oval oval:com.redhat.rhba:tst:20152197354

AND

comment libreoffice-xsltfilter is earlier than 1:5.0.6.2-14.el7
oval oval:com.redhat.rhsa:tst:20171975257
comment libreoffice-xsltfilter is signed with Red Hat redhatrelease2 key
oval oval:com.redhat.rhba:tst:20152197356

AND

comment libreofficekit is earlier than 1:5.0.6.2-14.el7
oval oval:com.redhat.rhsa:tst:20171975259
comment libreofficekit is signed with Red Hat redhatrelease2 key
oval oval:com.redhat.rhsa:tst:20171975260

AND

comment libreofficekit-devel is earlier than 1:5.0.6.2-14.el7
oval oval:com.redhat.rhsa:tst:20171975261
comment libreofficekit-devel is signed with Red Hat redhatrelease2 key
oval oval:com.redhat.rhsa:tst:20171975262

rhsa

id	RHSA-2017:1975
released	2017-08-01
severity	Moderate
title	RHSA-2017:1975: libreoffice security and bug fix update (Moderate)

rpms

autocorr-af-1:5.0.6.2-14.el7
autocorr-bg-1:5.0.6.2-14.el7
autocorr-ca-1:5.0.6.2-14.el7
autocorr-cs-1:5.0.6.2-14.el7
autocorr-da-1:5.0.6.2-14.el7
autocorr-de-1:5.0.6.2-14.el7
autocorr-en-1:5.0.6.2-14.el7
autocorr-es-1:5.0.6.2-14.el7
autocorr-fa-1:5.0.6.2-14.el7
autocorr-fi-1:5.0.6.2-14.el7
autocorr-fr-1:5.0.6.2-14.el7
autocorr-ga-1:5.0.6.2-14.el7
autocorr-hr-1:5.0.6.2-14.el7
autocorr-hu-1:5.0.6.2-14.el7
autocorr-is-1:5.0.6.2-14.el7
autocorr-it-1:5.0.6.2-14.el7
autocorr-ja-1:5.0.6.2-14.el7
autocorr-ko-1:5.0.6.2-14.el7
autocorr-lb-1:5.0.6.2-14.el7
autocorr-lt-1:5.0.6.2-14.el7
autocorr-mn-1:5.0.6.2-14.el7
autocorr-nl-1:5.0.6.2-14.el7
autocorr-pl-1:5.0.6.2-14.el7
autocorr-pt-1:5.0.6.2-14.el7
autocorr-ro-1:5.0.6.2-14.el7
autocorr-ru-1:5.0.6.2-14.el7
autocorr-sk-1:5.0.6.2-14.el7
autocorr-sl-1:5.0.6.2-14.el7
autocorr-sr-1:5.0.6.2-14.el7
autocorr-sv-1:5.0.6.2-14.el7
autocorr-tr-1:5.0.6.2-14.el7
autocorr-vi-1:5.0.6.2-14.el7
autocorr-zh-1:5.0.6.2-14.el7
libreoffice-1:5.0.6.2-14.el7
libreoffice-base-1:5.0.6.2-14.el7
libreoffice-bsh-1:5.0.6.2-14.el7
libreoffice-calc-1:5.0.6.2-14.el7
libreoffice-core-1:5.0.6.2-14.el7
libreoffice-debuginfo-1:5.0.6.2-14.el7
libreoffice-draw-1:5.0.6.2-14.el7
libreoffice-emailmerge-1:5.0.6.2-14.el7
libreoffice-filters-1:5.0.6.2-14.el7
libreoffice-gdb-debug-support-1:5.0.6.2-14.el7
libreoffice-glade-1:5.0.6.2-14.el7
libreoffice-graphicfilter-1:5.0.6.2-14.el7
libreoffice-impress-1:5.0.6.2-14.el7
libreoffice-langpack-af-1:5.0.6.2-14.el7
libreoffice-langpack-ar-1:5.0.6.2-14.el7
libreoffice-langpack-as-1:5.0.6.2-14.el7
libreoffice-langpack-bg-1:5.0.6.2-14.el7
libreoffice-langpack-bn-1:5.0.6.2-14.el7
libreoffice-langpack-br-1:5.0.6.2-14.el7
libreoffice-langpack-ca-1:5.0.6.2-14.el7
libreoffice-langpack-cs-1:5.0.6.2-14.el7
libreoffice-langpack-cy-1:5.0.6.2-14.el7
libreoffice-langpack-da-1:5.0.6.2-14.el7
libreoffice-langpack-de-1:5.0.6.2-14.el7
libreoffice-langpack-dz-1:5.0.6.2-14.el7
libreoffice-langpack-el-1:5.0.6.2-14.el7
libreoffice-langpack-en-1:5.0.6.2-14.el7
libreoffice-langpack-es-1:5.0.6.2-14.el7
libreoffice-langpack-et-1:5.0.6.2-14.el7
libreoffice-langpack-eu-1:5.0.6.2-14.el7
libreoffice-langpack-fa-1:5.0.6.2-14.el7
libreoffice-langpack-fi-1:5.0.6.2-14.el7
libreoffice-langpack-fr-1:5.0.6.2-14.el7
libreoffice-langpack-ga-1:5.0.6.2-14.el7
libreoffice-langpack-gl-1:5.0.6.2-14.el7
libreoffice-langpack-gu-1:5.0.6.2-14.el7
libreoffice-langpack-he-1:5.0.6.2-14.el7
libreoffice-langpack-hi-1:5.0.6.2-14.el7
libreoffice-langpack-hr-1:5.0.6.2-14.el7
libreoffice-langpack-hu-1:5.0.6.2-14.el7
libreoffice-langpack-it-1:5.0.6.2-14.el7
libreoffice-langpack-ja-1:5.0.6.2-14.el7
libreoffice-langpack-kk-1:5.0.6.2-14.el7
libreoffice-langpack-kn-1:5.0.6.2-14.el7
libreoffice-langpack-ko-1:5.0.6.2-14.el7
libreoffice-langpack-lt-1:5.0.6.2-14.el7
libreoffice-langpack-lv-1:5.0.6.2-14.el7
libreoffice-langpack-mai-1:5.0.6.2-14.el7
libreoffice-langpack-ml-1:5.0.6.2-14.el7
libreoffice-langpack-mr-1:5.0.6.2-14.el7
libreoffice-langpack-nb-1:5.0.6.2-14.el7
libreoffice-langpack-nl-1:5.0.6.2-14.el7
libreoffice-langpack-nn-1:5.0.6.2-14.el7
libreoffice-langpack-nr-1:5.0.6.2-14.el7
libreoffice-langpack-nso-1:5.0.6.2-14.el7
libreoffice-langpack-or-1:5.0.6.2-14.el7
libreoffice-langpack-pa-1:5.0.6.2-14.el7
libreoffice-langpack-pl-1:5.0.6.2-14.el7
libreoffice-langpack-pt-BR-1:5.0.6.2-14.el7
libreoffice-langpack-pt-PT-1:5.0.6.2-14.el7
libreoffice-langpack-ro-1:5.0.6.2-14.el7
libreoffice-langpack-ru-1:5.0.6.2-14.el7
libreoffice-langpack-si-1:5.0.6.2-14.el7
libreoffice-langpack-sk-1:5.0.6.2-14.el7
libreoffice-langpack-sl-1:5.0.6.2-14.el7
libreoffice-langpack-sr-1:5.0.6.2-14.el7
libreoffice-langpack-ss-1:5.0.6.2-14.el7
libreoffice-langpack-st-1:5.0.6.2-14.el7
libreoffice-langpack-sv-1:5.0.6.2-14.el7
libreoffice-langpack-ta-1:5.0.6.2-14.el7
libreoffice-langpack-te-1:5.0.6.2-14.el7
libreoffice-langpack-th-1:5.0.6.2-14.el7
libreoffice-langpack-tn-1:5.0.6.2-14.el7
libreoffice-langpack-tr-1:5.0.6.2-14.el7
libreoffice-langpack-ts-1:5.0.6.2-14.el7
libreoffice-langpack-uk-1:5.0.6.2-14.el7
libreoffice-langpack-ve-1:5.0.6.2-14.el7
libreoffice-langpack-xh-1:5.0.6.2-14.el7
libreoffice-langpack-zh-Hans-1:5.0.6.2-14.el7
libreoffice-langpack-zh-Hant-1:5.0.6.2-14.el7
libreoffice-langpack-zu-1:5.0.6.2-14.el7
libreoffice-librelogo-1:5.0.6.2-14.el7
libreoffice-math-1:5.0.6.2-14.el7
libreoffice-nlpsolver-1:5.0.6.2-14.el7
libreoffice-officebean-1:5.0.6.2-14.el7
libreoffice-ogltrans-1:5.0.6.2-14.el7
libreoffice-opensymbol-fonts-1:5.0.6.2-14.el7
libreoffice-pdfimport-1:5.0.6.2-14.el7
libreoffice-postgresql-1:5.0.6.2-14.el7
libreoffice-pyuno-1:5.0.6.2-14.el7
libreoffice-rhino-1:5.0.6.2-14.el7
libreoffice-sdk-1:5.0.6.2-14.el7
libreoffice-sdk-doc-1:5.0.6.2-14.el7
libreoffice-ure-1:5.0.6.2-14.el7
libreoffice-wiki-publisher-1:5.0.6.2-14.el7
libreoffice-writer-1:5.0.6.2-14.el7
libreoffice-xsltfilter-1:5.0.6.2-14.el7
libreofficekit-1:5.0.6.2-14.el7
libreofficekit-devel-1:5.0.6.2-14.el7

refmap via4

bid	97671
confirm	http://www.libreoffice.org/about-us/security/advisories/cve-2017-7870/
debian	DSA-3837
gentoo	GLSA-201706-28
misc	https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=372 https://github.com/LibreOffice/core/commit/62a97e6a561ce65e88d4c537a1b82c336f012722
sectrack	1039029

Last major update

05-01-2018 - 02:31

Published

14-04-2017 - 04:59

Last modified

05-01-2018 - 02:31