REDHAT-BUG-2488964: Buffer Overflow
LibreOffice Calc compiles cell formulas when opening a spreadsheet. A heap buffer overflow existed when compiling a very long formula made up of many opening tokens. The array that tracks nesting depth was allocated one element too small for that worst case, so such a formula wrote one element past its end. In fixed versions the array is sized to hold the largest possible nesting.
Affected Software
Event History
Frequently Asked Questions
What is the severity of REDHAT-BUG-2488964?
The severity of REDHAT-BUG-2488964 is high with a score of 7.
What is the nature of the vulnerability in REDHAT-BUG-2488964?
REDHAT-BUG-2488964 is a heap buffer overflow vulnerability that occurs when LibreOffice Calc compiles excessively long cell formulas.
How can I mitigate the risk of REDHAT-BUG-2488964?
To mitigate the risk of REDHAT-BUG-2488964, update LibreOffice Calc to the latest version where this vulnerability is patched.
Who is affected by REDHAT-BUG-2488964?
Any user of The Document Foundation LibreOffice Calc who opens spreadsheets with long and complex formulas may be affected by REDHAT-BUG-2488964.
What could happen if REDHAT-BUG-2488964 is exploited?
If REDHAT-BUG-2488964 is exploited, it could lead to application crashes or potentially arbitrary code execution due to the buffer overflow.