Home

CVE-2017-7856

Description

LibreOffice before 2017-03-11 has an out-of-bounds write caused by a heap-based buffer overflow in the SVMConverter::ImplConvertFromSVM1 function in vcl/source/gdi/svmconverter.cxx.

Risk Information

Base Score
9.8
MODERATE
Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS Score
Exploitation Probability
1.783

Associated Vulnerability

VulnerabilityOS Platform
Multiple vulnerabilities affected in LibreOffice (x64) 5.2.6.1Windows
Multiple vulnerabilities affected in LibreOffice 5.2.6.1Windows

Patch Details

Click to see the patches provided by ManageEngine for this CVE
Patch IDPatch Description
PATCH-343131LibreOffice (x64) (24.8.3)
PATCH-340893LibreOffice (24.8.0)

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234