Heap-based buffer overflow in LibreOffice - CVE-2016-10327

Vulnerability details

The vulnerability allows a remote attacker to execute arbitrary code on the target system.

The vulnerability exists due to a boundary error when processing EMF files with bitmap data preceded by a header and a field with in that header which states the offset from the start of the header to the bitmap data. A remote attacker cat embed a malicious EMF file into Office document, trick the victim into opening it, trigger heap-based buffer overflow and execute arbitrary code on the target system.

Successful exploitation of the vulnerability may allow an attacker to compromise vulnerable system.

Affected software

How to mitigate CVE-2016-10327

External References

• http://www.libreoffice.org/about-us/security/advisories/cve-2016-10327/

Related Security Bulletins

• Multiple vulnerabilities in LibreOffice
• Gentoo update for LibreOffice
• Ubuntu update for LibreOffice
• Heap-based buffer overflow in libreoffice (Alpine package)