Summary
It was discovered that libmwaw incorrectly handled certain malformed
document files. If a user or automated system were tricked into opening a
specially crafted file, a remote attacker could cause libmwaw to crash,
resulting in a denial of service, or possibly execute arbitrary code.
Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 14.04 LTS 14.04:LTS | libmwaw | 0.1.11-1ubuntu1.1 |
| Ubuntu · 16.04 LTS 16.04:LTS | libmwaw | 0.3.7-1ubuntu2.1 |
Vulnerabilities 1
-
Unscored —
Document Liberation Project libmwaw before 2017-04-08 has an out-of-bounds write caused by a heap-based buffer overflow…
References
-
report
https://ubuntu.com/security/CVE-2017-9433