CVE-2017-7870

LibreOffice before 2017-01-02 has an out-of-bounds write caused by a heap-based buffer overflow related to the tools::Polygon::Insert function in…

published April 14, 2017

CVSS
—
EPSS
4%
Percentile
90.1
In the wild
Unconfirmed
What it is

⚠️ A sneaky out-of-bounds write is lurking in LibreOffice's tools::Polygon::Insert function! This vulnerability could give unexpected control to a crafty user. 😱 Think of this like a construction worker who accidentally builds a wall too far out into the street. This overflow might cause chaos, allowing unintended access where it shouldn’t be, just like a wall blocking traffic or pedestrians! An attacker could exploit this vulnerability to corrupt memory, potentially leading to crashes or unexpected behavior in LibreOffice. This could disrupt user productivity, causing documents to misbehave when you need them most!

Put simply

Think of this like a construction worker who accidentally builds a wall too far out into the street. This overflow might cause chaos, allowing unintended access where it shouldn’t be, just like a wall blocking traffic or pedestrians! The out-of-bounds write occurs due to a heap-based buffer overflow in the tools::Polygon::Insert function, allowing potential manipulation of memory allocation and usage if exploited.

What to do

An attacker could exploit this vulnerability to corrupt memory, potentially leading to crashes or unexpected behavior in LibreOffice. This could disrupt user productivity, causing documents to misbehave when you need them most! To mitigate this issue, ensure your LibreOffice is updated to the version released after January 2, 2017. Regularly audit your software for updates to maintain security and prevent potential exploitation. 🛡️ You've got this! Keeping your software up-to-date will help you maintain a secure environment. 🚀

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.03864 · 90.1th percentile
Published
2017-04-14T04:30Z
EPSS history
Timeline
  • 14 APR 04:30Z
    LibreOffice before 2017-01-02 has an out-of-bounds write caused by a heap-based buffer overflow related to the tools::Polygon::Insert function in…
    cvelistv5