CVE-2018-11790

Published: Jan 31, 2019Modified: Nov 21, 2024

7.8

Vector

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Exploitability: 1.8 / Impact: 5.9

Source: NVD

Description

When loading a document with Apache Open Office 4.1.5 and earlier with smaller end line termination than the operating system uses, the defect occurs. In this case OpenOffice runs into an Arithmetic Overflow at a string length calculation.

Affected (3)

Products: Apache: Openoffice · Canonical: Ubuntu Linux

1 product

1 product

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Apache Openoffice	Up to 4.1.5

Configuration B

2 vulnerable

Vulnerable Software	Affected Versions
Canonical Ubuntu Linux	Version 14.04
Canonical Ubuntu Linux	Version 16.04

Related CWEs

CWE-682

Incorrect Calculation

The product performs a calculation that generates incorrect or unintended results that are later used in security-critical decisions or resource management.

References (8)

http://www.securityfocus.com/bid/106803

Source: security@apache.org

Third Party AdvisoryVDB Entry

https://lists.apache.org/thread.html/7394e6b5f78a878bd0c44e9bc9adf90b8cdf49e9adc0f287145aba9b%40%3Ccommits.openoffice.apache.org%3E

Source: security@apache.org

https://usn.ubuntu.com/3883-1/

Source: security@apache.org

Third Party Advisory

https://www.openoffice.org/security/cves/CVE-2018-11790.html

Source: security@apache.org

PatchVendor Advisory

http://www.securityfocus.com/bid/106803

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party AdvisoryVDB Entry

https://lists.apache.org/thread.html/7394e6b5f78a878bd0c44e9bc9adf90b8cdf49e9adc0f287145aba9b%40%3Ccommits.openoffice.apache.org%3E

Source: af854a3a-2127-422b-91ae-364da2661108

https://usn.ubuntu.com/3883-1/

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

https://www.openoffice.org/security/cves/CVE-2018-11790.html

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

Timeline

No history available yet.