Published: 25/05/2023 Updated: 26/11/2023

CVSS v3 Base Score: 7.8 | Impact Score: 5.9 | Exploitability Score: 1.8

VMScore: 0

Improper Validation of Array Index vulnerability in the spreadsheet component of The Document Foundation LibreOffice allows an malicious user to craft a spreadsheet document that will cause an array index underflow when loaded. In the affected versions of LibreOffice certain malformed spreadsheet formulas, such as AGGREGATE, could be created with less parameters passed to the formula interpreter than it expected, leading to an array index underflow, in which case there is a risk that arbitrary code could be executed. This issue affects: The Document Foundation LibreOffice 7.4 versions before 7.4.6; 7.5 versions before 7.5.1.

Vulnerable Product	Search on Vulmon	Subscribe to Product
libreoffice libreoffice
debian debian linux 10.0

Synopsis Moderate: libreoffice security update Type/Severity Security Advisory: Moderate Red Hat Insights patch analysis Identify and remediate systems affected by this advisory View affected systems Topic An update for libreoffice is now available for Red Hat Enterprise Linux 9Red Hat Product Security has rated this update as hav ...

Two security issues were discocvered in LibreOffice, which could potentially result in the execution of arbitrary code when loading a malformed spreadsheet document or unacknowlegded loading of linked documents within a floating frame For the stable distribution (bullseye), these problems have been fixed in version 1:704-4+deb11u7 We recommend ...

DescriptionA vulnerability was found in LibreOffice Improper validation of the array index in the spreadsheet component of The Document Foundation in LibreOffice allows an attacker to craft a spreadsheet document that causes an array index underflow when loaded In affected versions of LibreOffice, certain malformed spreadsheet formulas, su ...

CWE-129 https://www.libreoffice.org/about-us/security/advisories/CVE-2023-0950 https://www.debian.org/security/2023/dsa-5415 https://lists.debian.org/debian-lts-announce/2023/08/msg00014.html https://security.gentoo.org/glsa/202311-15 https://access.redhat.com/errata/RHSA-2023:6508 https://nvd.nist.gov https://www.debian.org/security/2023/dsa-5415

CVE-2023-0950

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

References

Vulmon Search

About

Products

Connect