Use-after-free error in LibreOffice - CVE-2018-10119

Vulnerability identifier: #VU12119

CSH Severity: Low

CVSS v4: 6.9 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N]

CVE-ID: CVE-2018-10119

CWE-ID: CWE-416

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote attacker to writ arbitrary files and cause DoS condition on the target system.

The weakness exists in sot/source/sdstor/stgstrms.cxx due to using an incorrect integer data type in the StgSmallStrm class. A remote attacker can submit a specially crafted document that uses the structured storage ole2 wrapper file format, trigger use-after-free error with write access and cause the service to crash.

LibreOffice
Debian Linux
Red Hat Enterprise Linux Server
Red Hat Enterprise Linux Workstation
Red Hat Enterprise Linux Desktop
Red Hat Enterprise Linux for Power
Fedora
openSUSE Leap
libreoffice

Update to versions 5.4.5.1 or 6.0.1.1 .

libreoffice - update to 5.3.7.2-9.fc26

• https://www.libreoffice.org/about-us/security/advisories/cve-2018-10119/

• Debian update for libreoffice
• OpenSUSE Linux update for libreoffice
• Red Hat update for libreoffice
• Fedora 26 update for libreoffice