Heap-based buffer overflow in LibreOffice - CVE-2016-10327

Detailed vulnerability description

The vulnerability allows a remote attacker to execute arbitrary code on the target system.

The vulnerability exists due to a boundary error when processing EMF files with bitmap data preceded by a header and a field with in that header which states the offset from the start of the header to the bitmap data. A remote attacker cat embed a malicious EMF file into Office document, trick the victim into opening it, trigger heap-based buffer overflow and execute arbitrary code on the target system.

Successful exploitation of the vulnerability may allow an attacker to compromise vulnerable system.

How to mitigate CVE-2016-10327

Sources

• http://www.libreoffice.org/about-us/security/advisories/cve-2016-10327/