CVEvulnerability
CVE-2018-11790
7.8 HIGH
Official page ↗
- Status
- Modified
- Published
- 2019-01-31
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.0 ([email protected])
- 7.8 HIGH — CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 4.6 MEDIUM — AV:L/AC:L/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-682
Description
When loading a document with Apache Open Office 4.1.5 and earlier with smaller end line termination than the operating system uses, the defect occurs. In this case OpenOffice runs into an Arithmetic Overflow at a string length calculation.
Affected configurations
• apache openoffice (<= 4.1.5)
• canonical ubuntu linux 14.04
• canonical ubuntu linux 16.04
Related
Weakness · CWE (1)
- CWE-682 Incorrect Calculation weakness
References
- http://www.securityfocus.com/bid/106803 Third Party Advisory, VDB Entry
- https://lists.apache.org/thread.html/7394e6b5f78a878bd0c44e9bc9adf90b8cdf49e9adc0f287145aba9b%40%3Ccommits.openoffice.apache.org%3E lists.apache.org
- https://usn.ubuntu.com/3883-1/ Third Party Advisory
- https://www.openoffice.org/security/cves/CVE-2018-11790.html Patch, Vendor Advisory
- http://www.securityfocus.com/bid/106803 Third Party Advisory, VDB Entry
- https://lists.apache.org/thread.html/7394e6b5f78a878bd0c44e9bc9adf90b8cdf49e9adc0f287145aba9b%40%3Ccommits.openoffice.apache.org%3E lists.apache.org
- https://usn.ubuntu.com/3883-1/ Third Party Advisory
- https://www.openoffice.org/security/cves/CVE-2018-11790.html Patch, Vendor Advisory