CVE-2016-10327

LibreOffice before 2016-12-22 has an out-of-bounds write caused by a heap-based buffer overflow related to the EnhWMFReader::ReadEnhWMF function in vcl/source/filter/wmf/enhwmf.cxx.

References

Affected packages

Git / github.com/libreoffice/core

Affected ranges

Type: GIT
Repo: https://github.com/libreoffice/core
Events: Introduced

0 Unknown introduced commit / All previous commits are affected

Fixed

7485fc2a1484f31631f62f97e5c64c0ae74c6416

Type: GIT
Repo: https://github.com/libreoffice/core
Events: Introduced

0 Unknown introduced commit / All previous commits are affected

Fixed

7485fc2a1484f31631f62f97e5c64c0ae74c6416

Affected versions

COOL_1.*

COOL_1.0

COOL_1.0.1

Other

LIBREOFFICE_3_3_FREEZE

LIBREOFFICE_PRE_BOOTSTRAP_BUILD

LO-BASE-INTEGRATION-DEV300_M101

LO-BASE-INTEGRATION-DEV300_m98

MELD_LIBREOFFICE_REPOS

OOO_BUILD_3_2_98_0

OOO_BUILD_3_2_98_1

OOO_BUILD_3_2_99_0_PRE

distro/suse/suse-3-6

libreoffice-3-5-branch-point

libreoffice-3-6-branch-point

libreoffice-4-0-branch-point

libreoffice-4-1-branch-point

libreoffice-4-2-branch-point

libreoffice-4-2-milestone-1

libreoffice-4-2-milestone-2

libreoffice-4-2-milestone-3

libreoffice-4-2-milestone-4

libreoffice-4-2-milestone-5

libreoffice-4-2-milestone-5-2

libreoffice-4-2-milestone-6

libreoffice-4-2-milestone-7

libreoffice-4-2-milestone-7-2

libreoffice-4-3-branch-point

libreoffice-4-4-branch-point

libreoffice-5-0-branch-point

libreoffice-5-1-branch-point

libreoffice-5-2-4-2-update-1

libreoffice-5-2-branch-point

libreoffice-5-3-branch-point

ooo/DEV300_last_svn_milestone

ooo/DEV300_m100

ooo/DEV300_m101

ooo/DEV300_m102

ooo/DEV300_m103

ooo/DEV300_m104

ooo/DEV300_m105

ooo/DEV300_m106

ooo/DEV300_m48

ooo/DEV300_m63

ooo/DEV300_m64

ooo/DEV300_m65

ooo/DEV300_m66

ooo/DEV300_m67

ooo/DEV300_m68

ooo/DEV300_m69

ooo/DEV300_m70

ooo/DEV300_m71

ooo/DEV300_m72

ooo/DEV300_m73

ooo/DEV300_m74

ooo/DEV300_m75

ooo/DEV300_m76

ooo/DEV300_m77

ooo/DEV300_m78

ooo/DEV300_m79

ooo/DEV300_m80

ooo/DEV300_m81

ooo/DEV300_m82

ooo/DEV300_m83

ooo/DEV300_m84

ooo/DEV300_m85

ooo/DEV300_m86

ooo/DEV300_m87

ooo/DEV300_m88

ooo/DEV300_m89

ooo/DEV300_m90

ooo/DEV300_m91

ooo/DEV300_m92

ooo/DEV300_m93

ooo/DEV300_m94

ooo/DEV300_m95

ooo/DEV300_m96

ooo/DEV300_m97

ooo/DEV300_m98

ooo/DEV300_m99

ooo/OOO330_m0

ooo/OOO330_m1

ooo/OOO330_m10

ooo/OOO330_m11

ooo/OOO330_m12

ooo/OOO330_m13

ooo/OOO330_m14

ooo/OOO330_m15

ooo/OOO330_m16

ooo/OOO330_m17

ooo/OOO330_m18

ooo/OOO330_m19

ooo/OOO330_m2

ooo/OOO330_m20

ooo/OOO330_m3

ooo/OOO330_m4

ooo/OOO330_m5

ooo/OOO330_m6

ooo/OOO330_m7

ooo/OOO330_m8

ooo/OOO330_m9

ooo/OOO340_m0

ooo/OOO340_m1

private/mmeeks/aafixes-4-4

windows_build_successful_2011_11_08

aoo/approx-3.*

aoo/approx-3.4.0

calc_libreoffice-3.*

calc_libreoffice-3.4.2.2-buildfix1

cd-5.*

cd-5.3-21

cd-5.3-23

cd-5.3-24

cd-5.3-25

cd-5.3-26

cd-5.3-27

cd-5.3-28

cd-5.3-3.1-branch-point

cd-5.3-43

cd-5.3-46

cd-5.3-47

cd-5.3-48

cd-5.3-49

cd-5.3-54

cd-5.3-60

cd-5.3-61

co-5.*

co-5.3-39

co-5.3-40

co-5.3-46

co-5.3-47

co-5.3-48

co-5.3-49

co-5.3-50

co-5.3-54

co-5.3-57

co-5.3-58

co-5.3-59

co-5.3-63

co-5.3-64

co-5.3-65

co-5.3-66

co-5.3-67

cp-4.*

cp-4.0-15-1

cp-4.0-15-2

cp-4.0-17-1

cp-4.0-20-1

cp-4.0-22

cp-4.0-23

cp-4.0-24

cp-4.1-1

cp-4.1-2

cp-4.1-3

cp-4.1-4

cp-4.1-5

cp-4.1-6

cp-4.1-7

cp-4.1-8

cp-4.1-9

cp-4.1-branch-point

cp-4.2-1

cp-4.2-15

cp-4.2-16

cp-4.2-17

cp-4.2-18

cp-4.2-19

cp-4.2-2

cp-4.2-20

cp-4.2-21

cp-4.2-22

cp-4.2-23

cp-4.2-24

cp-4.2-26

cp-4.2-27

cp-4.2-28

cp-4.2-29

cp-4.2-3

cp-4.2-30

cp-4.2-4

cp-4.2-5

cp-4.2-6

cp-4.2-7

cp-4.2-8

cp-4.2-9

cp-4.2-branch-point

cp-4.3-1

cp-4.3-10

cp-4.3-11

cp-4.3-12

cp-4.3-13

cp-4.3-2

cp-4.3-3

cp-4.3-4

cp-4.3-5

cp-4.3-6

cp-4.3-8

cp-4.3-9

cp-4.3-branch-point

cp-4.4-1

cp-4.4-10

cp-4.4-11

cp-4.4-13

cp-4.4-2

cp-4.4-8

cp-4.4-9

cp-4.4-branch-point

cp-5.*

cp-5.0-10

cp-5.0-11

cp-5.0-12

cp-5.0-13

cp-5.0-14

cp-5.0-16

cp-5.0-17

cp-5.0-18

cp-5.0-19

cp-5.0-20

cp-5.0-21

cp-5.0-22

cp-5.0-23

cp-5.0-24

cp-5.0-25

cp-5.0-26

cp-5.0-27

cp-5.0-28

cp-5.0-29

cp-5.0-30

cp-5.0-31

cp-5.0-32

cp-5.0-33

cp-5.0-34

cp-5.0-35

cp-5.0-36

cp-5.0-37

cp-5.0-38

cp-5.0-39

cp-5.0-40

cp-5.0-41

cp-5.0-42

cp-5.0-43

cp-5.0-44

cp-5.0-45

cp-5.0-46

cp-5.0-7

cp-5.0-8

cp-5.0-9

cp-5.0-branch-point

cp-5.1-1

cp-5.1-10

cp-5.1-11

cp-5.1-12

cp-5.1-13

cp-5.1-14

cp-5.1-15

cp-5.1-16

cp-5.1-17

cp-5.1-18

cp-5.1-2

cp-5.1-20

cp-5.1-21

cp-5.1-22

cp-5.1-23

cp-5.1-24

cp-5.1-25

cp-5.1-26

cp-5.1-27

cp-5.1-3

cp-5.1-4

cp-5.1-5

cp-5.1-6

cp-5.1-7

cp-5.1-8

cp-5.1-9

cp-5.1-branch-point

cp-5.3-1

cp-5.3-10

cp-5.3-11

cp-5.3-12

cp-5.3-13

cp-5.3-14

cp-5.3-15

cp-5.3-16

cp-5.3-17

cp-5.3-18

cp-5.3-19

cp-5.3-2

cp-5.3-20

cp-5.3-21

cp-5.3-22

cp-5.3-23

cp-5.3-24

cp-5.3-25

cp-5.3-26

cp-5.3-27

cp-5.3-28

cp-5.3-29

cp-5.3-3

cp-5.3-30

cp-5.3-31

cp-5.3-32

cp-5.3-33

cp-5.3-34

cp-5.3-35

cp-5.3-36

cp-5.3-37

cp-5.3-38

cp-5.3-39

cp-5.3-4

cp-5.3-40

cp-5.3-41

cp-5.3-42

cp-5.3-43

cp-5.3-44

cp-5.3-45

cp-5.3-46

cp-5.3-47

cp-5.3-49

cp-5.3-5

cp-5.3-50

cp-5.3-51

cp-5.3-52

cp-5.3-53

cp-5.3-54

cp-5.3-55

cp-5.3-56

cp-5.3-57

cp-5.3-58

cp-5.3-59

cp-5.3-6

cp-5.3-60

cp-5.3-61

cp-5.3-62

cp-5.3-63

cp-5.3-64

cp-5.3-65

cp-5.3-66

cp-5.3-7

cp-5.3-8

cp-5.3-8-win

cp-5.3-9

cp-5.3-branch-point

gov-5.*

gov-5.3-39

gov-5.3-45

gov-5.3-46

gov-5.3-47

gov-5.3-49

iosremote-1.*

iosremote-1.0.0

libreoffice-3.*

libreoffice-3.2.99.2

libreoffice-3.2.99.3

libreoffice-3.3.0.1

libreoffice-3.3.0.2

libreoffice-3.3.0.3

libreoffice-3.3.0.4

libreoffice-3.3.1.1

libreoffice-3.3.2.1

libreoffice-3.3.3.1

libreoffice-3.3.4.1

libreoffice-3.3.99.1

libreoffice-3.3.99.2

libreoffice-3.3.99.3

libreoffice-3.3.99.4

libreoffice-3.3.99.5

libreoffice-3.4.0.1

libreoffice-3.4.0.2

libreoffice-3.4.1.1

libreoffice-3.4.2.1

libreoffice-3.4.2.2

libreoffice-3.4.2.3

libreoffice-3.4.99.0

libreoffice-3.4.99.1

libreoffice-3.4.99.2

libreoffice-3.4.99.3

libreoffice-3.5.0.0

libreoffice-3.5.0.1

libreoffice-3.5.0.2

libreoffice-3.5.0.3

libreoffice-3.5.1.1

libreoffice-3.5.1.2

libreoffice-3.5.2.1

libreoffice-3.5.2.2

libreoffice-3.5.3.1

libreoffice-3.5.3.2

libreoffice-3.5.4.1

libreoffice-3.5.4.2

libreoffice-3.5.5.1

libreoffice-3.5.5.2

libreoffice-3.5.5.3

libreoffice-3.5.6.1

libreoffice-3.5.7.1

libreoffice-3.5.7.2

libreoffice-3.5.98.1

libreoffice-3.5.99.1

libreoffice-3.6.0.0.beta2

libreoffice-3.6.0.0.beta3

libreoffice-3.6.0.1

libreoffice-3.6.0.2

libreoffice-3.6.0.3

libreoffice-3.6.0.4

libreoffice-3.6.1.2

libreoffice-3.6.1.2-hotfixes1

libreoffice-3.6.2.1

libreoffice-3.6.2.2

libreoffice-3.6.3.1

libreoffice-3.6.3.2

libreoffice-3.6.4.1

libreoffice-3.6.4.2

libreoffice-3.6.4.3

libreoffice-3.6.5.1

libreoffice-3.6.5.2

libreoffice-3.6.6.1

libreoffice-3.6.6.2

libreoffice-3.6.7.1

libreoffice-3.6.7.2

libreoffice-4.*

libreoffice-4.0.0.0.alpha1

libreoffice-4.0.0.0.beta1

libreoffice-4.0.0.0.beta2

libreoffice-4.0.0.1

libreoffice-4.0.0.2

libreoffice-4.0.0.2-buildfix1

libreoffice-4.0.0.3

libreoffice-4.0.0.3-hotfixes1

libreoffice-4.0.1.1

libreoffice-4.0.1.2

libreoffice-4.0.2.1

libreoffice-4.0.2.2

libreoffice-4.0.3.1

libreoffice-4.0.3.2

libreoffice-4.0.3.3

libreoffice-4.0.4.1

libreoffice-4.0.4.2

libreoffice-4.0.5.1

libreoffice-4.0.5.2

libreoffice-4.0.6.1

libreoffice-4.0.6.2

libreoffice-4.1.0.0.alpha1

libreoffice-4.1.0.0.alpha1-buildfix1

libreoffice-4.1.0.0.alpha1-buildfix2

libreoffice-4.1.0.0.beta1

libreoffice-4.1.0.0.beta1-buildfix1

libreoffice-4.1.0.0.beta2

libreoffice-4.1.0.1

libreoffice-4.1.0.1-buildfix1

libreoffice-4.1.0.1-buildfix2

libreoffice-4.1.0.2

libreoffice-4.1.0.3

libreoffice-4.1.0.3-hotfixes1

libreoffice-4.1.0.4

libreoffice-4.1.1.1

libreoffice-4.1.1.2

libreoffice-4.1.1.2-hotfix1

libreoffice-4.1.2.1

libreoffice-4.1.2.2

libreoffice-4.1.2.3

libreoffice-4.1.3.1

libreoffice-4.1.3.2

libreoffice-4.1.4.1

libreoffice-4.1.4.2

libreoffice-4.1.5.1

libreoffice-4.1.5.2

libreoffice-4.1.5.3

libreoffice-4.1.6.1

libreoffice-4.1.6.2

libreoffice-4.2.0.0.alpha1

libreoffice-4.2.0.0.beta1

libreoffice-4.2.0.0.beta2

libreoffice-4.2.0.1

libreoffice-4.2.0.2

libreoffice-4.2.0.2-buildfix1

libreoffice-4.2.0.3

libreoffice-4.2.0.4

libreoffice-4.2.1.1

libreoffice-4.2.2.1

libreoffice-4.2.3.1

libreoffice-4.2.3.2

libreoffice-4.2.3.3

libreoffice-4.2.3.3-hotfix1

libreoffice-4.2.4.1

libreoffice-4.2.4.2

libreoffice-4.2.5.1

libreoffice-4.2.5.2

libreoffice-4.2.5.2-hotfix1

libreoffice-4.2.6.1

libreoffice-4.2.6.2

libreoffice-4.2.6.3

libreoffice-4.2.7.1

libreoffice-4.2.7.2

libreoffice-4.2.8.1

libreoffice-4.2.8.2

libreoffice-4.3.0.0.alpha1

libreoffice-4.3.0.0.beta1

libreoffice-4.3.0.0.beta1-hotfix1

libreoffice-4.3.0.0.beta2

libreoffice-4.3.0.0.beta2-buildfix1

libreoffice-4.3.0.1

libreoffice-4.3.0.1-buildfix1

libreoffice-4.3.0.2

libreoffice-4.3.0.3

libreoffice-4.3.0.3-buildfix1

libreoffice-4.3.0.4

libreoffice-4.3.1.1

libreoffice-4.3.1.2

libreoffice-4.3.2.1

libreoffice-4.3.2.2

libreoffice-4.3.3.1

libreoffice-4.3.3.1-buildfix1

libreoffice-4.3.3.2

libreoffice-4.3.4.1

libreoffice-4.3.5.1

libreoffice-4.3.5.2

libreoffice-4.3.6.1

libreoffice-4.3.6.2

libreoffice-4.3.7.1

libreoffice-4.3.7.2

libreoffice-4.4.0.0.alpha1

libreoffice-4.4.0.0.alpha2

libreoffice-4.4.0.0.beta1

libreoffice-4.4.0.0.beta2

libreoffice-4.4.0.1

libreoffice-4.4.0.2

libreoffice-4.4.0.3

libreoffice-4.4.1.1

libreoffice-4.4.1.2

libreoffice-4.4.2.1

libreoffice-4.4.2.2

libreoffice-4.4.2.2-buildfix1

libreoffice-4.4.3.1

libreoffice-4.4.3.2

libreoffice-4.4.4.1

libreoffice-4.4.4.1-buildfix1

libreoffice-4.4.4.2

libreoffice-4.4.4.3

libreoffice-4.4.5.1

libreoffice-4.4.5.2

libreoffice-4.4.5.3

libreoffice-4.4.6.1

libreoffice-4.4.6.2

libreoffice-4.4.6.3

libreoffice-4.4.7.1

libreoffice-4.4.7.2

libreoffice-5.*

libreoffice-5.0.0.0.alpha1

libreoffice-5.0.0.0.alpha1-buildfix1

libreoffice-5.0.0.0.beta1

libreoffice-5.0.0.0.beta2

libreoffice-5.0.0.0.beta2-buildfix1

libreoffice-5.0.0.0.beta3

libreoffice-5.0.0.1

libreoffice-5.0.0.2

libreoffice-5.0.0.3

libreoffice-5.0.0.4

libreoffice-5.0.0.5

libreoffice-5.0.0.5-hotfix1

libreoffice-5.0.1.1

libreoffice-5.0.1.2

libreoffice-5.0.2.1

libreoffice-5.0.2.2

libreoffice-5.0.3.1

libreoffice-5.0.3.2

libreoffice-5.0.4.1

libreoffice-5.0.4.2

libreoffice-5.0.5.1

libreoffice-5.0.5.2

libreoffice-5.0.6.1

libreoffice-5.0.6.2

libreoffice-5.0.6.3

libreoffice-5.1.0.0.alpha1

libreoffice-5.1.0.0.alpha1-buildfix1

libreoffice-5.1.0.0.beta1

libreoffice-5.1.0.0.beta1-buildfix1

libreoffice-5.1.0.0.beta2

libreoffice-5.1.0.1

libreoffice-5.1.0.2

libreoffice-5.1.0.3

libreoffice-5.1.1.1

libreoffice-5.1.1.2

libreoffice-5.1.1.3

libreoffice-5.1.2.1

libreoffice-5.1.2.1-buildfix1

libreoffice-5.1.2.2

libreoffice-5.1.3.1

libreoffice-5.1.3.2

libreoffice-5.1.4.1

libreoffice-5.1.4.2

libreoffice-5.1.5.1

libreoffice-5.1.5.2

libreoffice-5.1.6.1

libreoffice-5.1.6.2

libreoffice-5.2.0.0.alpha1

libreoffice-5.2.0.0.beta1

libreoffice-5.2.0.0.beta1-hotfix1

libreoffice-5.2.0.0.beta2

libreoffice-5.2.0.1

libreoffice-5.2.0.2

libreoffice-5.2.0.3

libreoffice-5.2.0.4

libreoffice-5.2.1.1

libreoffice-5.2.1.2

libreoffice-5.2.2.1

libreoffice-5.2.2.2

libreoffice-5.2.3.1

libreoffice-5.2.3.2

libreoffice-5.2.3.3

libreoffice-5.2.4.1

libreoffice-5.2.4.2

libreoffice-5.2.4.2-buildfix1

libreoffice-5.2.4.2-update-2

libreoffice-5.2.5.1

libreoffice-5.2.6.1

libreoffice-5.2.6.2

libreoffice-5.2.7.1

libreoffice-5.2.7.2

libreoffice-5.3.0.0.alpha1

libreoffice-5.3.0.0.beta1

libreoffice-5.3.0.0.beta2

libreoffice-5.3.0.1

libreoffice-5.3.0.2

libreoffice-5.3.0.3

libreoffice-5.3.1.1

libreoffice-5.3.1.2

libreoffice-5.3.2.1

libreoffice-5.3.2.2

libreoffice-5.3.3.1

libreoffice-5.3.3.2

libreoffice-5.3.4.1

libreoffice-5.3.4.2

libreoffice-5.3.5.1

libreoffice-5.3.5.2

libreoffice-5.3.6.1

libreoffice-5.3.7.1

libreoffice-5.3.7.2

libs-extern-sys_libreoffice-3.*

libs-extern-sys_libreoffice-3.4.2.2-buildfix1

libs-extern_libreoffice-3.*

libs-extern_libreoffice-3.4.2.2-buildfix1

lof-4.*

lof-4.3-branch-point

sdremote-1.*

sdremote-1.0.0

sdremote-1.0.1

sdremote-1.0.2

sdremote-1.0.3

sdremote-1.0.4

sdremote-1.0.5

sdremote-1.0.6

sdremote-2.*

sdremote-2.0.0

suse-3.*

suse-3.6-0

suse-3.6-10

suse-3.6-11

suse-3.6-12

suse-3.6-13

suse-3.6-14

suse-3.6-15

suse-3.6-16

suse-3.6-17

suse-3.6-18

suse-3.6-19

suse-3.6-2

suse-3.6-20

suse-3.6-21

suse-3.6-22

suse-3.6-23

suse-3.6-24

suse-3.6-25

suse-3.6-26

suse-3.6-27

suse-3.6-28

suse-3.6-29

suse-3.6-3

suse-3.6-30

suse-3.6-31

suse-3.6-32

suse-3.6-4

suse-3.6-5

suse-3.6-6

suse-3.6-7

suse-3.6-8

suse-3.6-9

suse-3.6-appup-3

suse-3.6-appup-4

suse-4.*

suse-4.0-1

suse-4.0-10

suse-4.0-11

suse-4.0-12

suse-4.0-13

suse-4.0-14

suse-4.0-15

suse-4.0-17

suse-4.0-18

suse-4.0-18-fix

suse-4.0-19

suse-4.0-2

suse-4.0-20

suse-4.0-21

suse-4.0-22

suse-4.0-23

suse-4.0-24

suse-4.0-25

suse-4.0-26

suse-4.0-27

suse-4.0-3

suse-4.0-4

suse-4.0-5

suse-4.0-7

suse-4.0-8

suse-4.0-9

testing_libreoffice-3.*

testing_libreoffice-3.3.99.4-hotfixes1

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2016-10327.json"

unresolved_ranges

[
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "5.3.0.0"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "fixed": "2016-12-22"
            }
        ]
    }
]

vanir_signatures

[
    {
        "deprecated": false,
        "signature_type": "Line",
        "signature_version": "v1",
        "digest": {
            "line_hashes": [
                "334053160755383975859705809270790090599",
                "34034932267292955216499041347490474619",
                "48980431915421534421871362110824146609",
                "6608963929227775552552095468522078752",
                "283900924918008700993223423756679953920",
                "333079618261165919802139808131331063063",
                "241931808347815321270186246937817161404",
                "221376714366991152167600797032763298481",
                "19056356198047102999527290008840291531",
                "145803185700566884705377919326943751767",
                "159286291030143378254486357485998754256"
            ],
            "threshold": 0.9
        },
        "source": "https://github.com/libreoffice/core/commit/7485fc2a1484f31631f62f97e5c64c0ae74c6416",
        "id": "CVE-2016-10327-1681ef8b",
        "target": {
            "file": "vcl/source/filter/wmf/enhwmf.cxx"
        }
    },
    {
        "deprecated": false,
        "signature_type": "Function",
        "signature_version": "v1",
        "digest": {
            "function_hash": "284193747462724565906558809339168579976",
            "length": 30327.0
        },
        "source": "https://github.com/libreoffice/core/commit/7485fc2a1484f31631f62f97e5c64c0ae74c6416",
        "id": "CVE-2016-10327-1c06df17",
        "target": {
            "file": "vcl/source/filter/wmf/enhwmf.cxx",
            "function": "EnhWMFReader::ReadEnhWMF"
        }
    }
]