Follow @Openwall on Twitter for new release announcements and other news
[<prev] [next>] [thread-next>] [day] [month] [year] [list]
Message-ID: <546BF2C0.6060000@mccme.ru>
Date: Wed, 19 Nov 2014 04:30:40 +0300
From: Alexander Cherepanov <cherepan@...me.ru>
To: oss-security@...ts.openwall.com
Subject: CVE Request: LibreOffice -- several issues

Hi!

Could CVEs please be assigned to the following issues?

https://bugs.freedesktop.org/show_bug.cgi?id=86446
Crashes importing malformed .doc -- DoS

https://bugs.freedesktop.org/show_bug.cgi?id=86447
Crashes importing malformed .ppt -- DoS

https://bugs.freedesktop.org/show_bug.cgi?id=86448
Crashes importing malformed .rtf -- DoS

https://bugs.freedesktop.org/show_bug.cgi?id=86449
Crash importing malformed .rtf -- potentially exploitable for RCE

https://bugs.freedesktop.org/show_bug.cgi?id=86451
Crashes importing malformed .rtf

Tested with LibreOffice 3.5.4 on Debian Stable (amd64).

Found during one evening with zzuf.

IIUC any crasher (or 100% cpu usage) in LO is a security issue because 
it takes down all other windows with it. But Michael Meeks from 
officesecurity@...ts.freedesktop.org indicated that they are not 
interested in CVEs for DoS-only crashers (I haven't asked about RCE) 
because they still have 180 crashers in their own testing. All info 
about their testing is regularly posted to LO devel mailing list.

-- 
Alexander Cherepanov

Powered by blists - more mailing lists

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.