CVE-2016-4324: Input Validation
Published Jul 8, 2016
·Updated
Use-after-free vulnerability in LibreOffice before 5.1.4 allows remote attackers to execute arbitrary code via a crafted RTF file, related to stylesheet and superscript tokens.
Affected Software
5 affected components
Debian Debian Linux=8.0
LibreOffice Libreoffice<=5.1.3
Canonical Ubuntu Linux=12.04
Canonical Ubuntu Linux=15.10
Canonical Ubuntu Linux=16.04
Event History
Jul 8, 2016
CVE Published
via MITRE·07:00 PM
Data Sourced
via MITRE·07:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2016-4324?
CVE-2016-4324 is considered a high severity vulnerability due to its potential to allow remote code execution.
2
How do I fix CVE-2016-4324?
To fix CVE-2016-4324, you should upgrade LibreOffice to version 5.1.4 or later.
3
What types of files are affected by CVE-2016-4324?
CVE-2016-4324 specifically affects crafted RTF files containing stylesheets and superscript tokens.
4
Who can exploit CVE-2016-4324?
CVE-2016-4324 can be exploited by remote attackers who send a specially crafted RTF file to the victim.
5
Which versions of LibreOffice are affected by CVE-2016-4324?
CVE-2016-4324 affects LibreOffice versions prior to 5.1.4.