CVE-2018-11790
First published: Sun Nov 18 2018(Updated: )
When loading a document with Apache Open Office 4.1.5 and earlier with smaller end line termination than the operating system uses, the defect occurs. In this case OpenOffice runs into an Arithmetic Overflow at a string length calculation.
Credit: security@apache.org security@apache.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Apache OpenOffice | <=4.1.5 | |
| Canonical Ubuntu Linux | =14.04 | |
| Canonical Ubuntu Linux | =16.04 | |
| ubuntu/libreoffice | <1:4.2.8-0ubuntu5.5 | 1:4.2.8-0ubuntu5.5 |
| ubuntu/libreoffice | <1:5.0.3~ | 1:5.0.3~ |
| debian/libreoffice | 1:7.0.4-4+deb11u9 1:7.0.4-4+deb11u10 4:7.4.7-1+deb12u3 4:7.4.7-1+deb12u4 4:24.2.5-3 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://www.openoffice.org/security/cves/CVE-2018-11790.html
- http://www.securityfocus.com/bid/106803
- https://usn.ubuntu.com/3883-1/
- https://lists.apache.org/thread.html/7394e6b5f78a878bd0c44e9bc9adf90b8cdf49e9adc0f287145aba9b@%3Ccommits.openoffice.apache.org%3E
- https://launchpad.net/bugs/cve/CVE-2018-11790
- https://lists.apache.org/thread.html/7394e6b5f78a878bd0c44e9bc9adf90b8cdf49e9adc0f287145aba9b%40%3Ccommits.openoffice.apache.org%3E
- https://www.openwall.com/lists/oss-security/2019/01/16/2
- https://github.com/LibreOffice/core/commit/bbc94edb9a91b27910d43610db9994df10dd99e1
- https://security-tracker.debian.org/tracker/CVE-2018-11790
- https://ubuntu.com/security/notices/USN-3883-1
- https://www.cve.org/CVERecord?id=CVE-2018-11790
- https://nvd.nist.gov/vuln/detail/CVE-2018-11790
- https://github.com/LibreOffice/core/commit/ae850353151cd6a79f7b4a012d0a411013c841a4
- https://cgit.freedesktop.org/libreoffice/core/commit/?h=libreoffice-5-0&id=92eed31707e655e484e263fee2b0c0ae93d73748
- https://ubuntu.com/security/CVE-2018-11790
Frequently Asked Questions
What is CVE-2018-11790?
CVE-2018-11790 is a vulnerability that occurs when loading a document with Apache Open Office 4.1.5 and earlier with smaller end line termination than the operating system uses, leading to an Arithmetic Overflow at a string length calculation.
Which software is affected by CVE-2018-11790?
The software affected by CVE-2018-11790 includes Apache OpenOffice 4.1.5 and earlier versions and certain versions of LibreOffice on Ubuntu and Debian.
What is the severity level of CVE-2018-11790?
CVE-2018-11790 has a severity level of 7.8, which is considered high.
How can I fix CVE-2018-11790?
To fix CVE-2018-11790, users should update Apache OpenOffice to version 4.1.6 or later and ensure they are running the latest version of LibreOffice on Ubuntu and Debian.
Where can I find more information about CVE-2018-11790?
More information about CVE-2018-11790 can be found on the MITRE CVE database and the official security notices from OpenWall and Ubuntu.
- agent/type
- collector/launchpad-cve
- source/Launchpad
- agent/author
- agent/weakness
- agent/severity
- agent/description
- collector/nvd-index
- agent/software-canonical-lookup-request
- collector/nvd-cve
- source/NVD
- agent/software-canonical-lookup
- collector/usn-cve
- source/Ubuntu
- agent/references
- agent/remedy
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/first-publish-date
- agent/event
- agent/tags
- collector/security-tracker-debian
- source/Debian
- agent/softwarecombine
- agent/trending
- vendor/apache
- canonical/apache openoffice
- version/apache openoffice/4.1.5
- vendor/canonical
- canonical/canonical ubuntu linux
- version/canonical ubuntu linux/14.04
- version/canonical ubuntu linux/16.04
- package-manager/ubuntu
- package-manager/debian