Errata overview
Errata ID 351
Date 2018-05-08
Source package libreoffice
Fixed in version 1:4.3.3-2+deb8u11
Description
This update addresses the following issues:
* A vulnerability in OpenOffice's PPT file parser allows attackers to craft
  malicious documents that cause denial of service (memory corruption and
  application crash) potentially resulting in arbitrary code execution.
  (CVE-2017-12607)
* A vulnerability in Apache OpenOffice Writer DOC file parser allows
  attackers to craft malicious documents that cause denial of service (memory
  corruption and application crash) potentially resulting in arbitrary code
  execution. (CVE-2017-12608)
* Remote arbitrary file disclosure vulnerability via WEBSERVICE formula
  (CVE-2018-6871)
* Use after free in sdstor/stgstrms.cxx:StgSmallStrm class allows for denial
  of service with crafted document. (CVE-2018-10119)
* Out of bounds write in filter/ww8/ww8toolbar.cxx:SwCTBWrapper class allows
  for denial of service with crafted document. (CVE-2018-10120)
Additional notes
CVE ID CVE-2017-12607
CVE-2017-12608
CVE-2018-6871
CVE-2018-10120
CVE-2018-10119
UCS Bug number #45916