CVE-2018-10120

Name of the Vulnerable Software and Affected Versions LibreOffice versions prior to 5.4.6.1 LibreOffice versions 6.x prior to 6.0.2.1

Description The issue is related to a buffer overflow in the SwCTBWrapper::Read function of the LibreOffice package. This can be exploited by a remote attacker using a specially crafted file, potentially leading to a denial of service or other unspecified impacts. The vulnerability is caused by the lack of validation of a customizations index in the SwCTBWrapper::Read function.

Recommendations For LibreOffice versions prior to 5.4.6.1, update to version 5.4.6.1 or later. For LibreOffice versions 6.x prior to 6.0.2.1, update to version 6.0.2.1 or later. As a temporary workaround, consider avoiding the use of the SwCTBWrapper::Read function until a patch is available.