FreeBSD VuXML: Documenting security issues in FreeBSD and the FreeBSD Ports Collection

libreoffice -- use-after-free vulnerability

Affected packages
libreoffice < 5.1.4


VuXML ID 3159cd70-4aaa-11e6-a7bd-14dae9d210b8
Discovery 2016-06-27
Entry 2016-07-15

Talos reports:

An exploitable Use After Free vulnerability exists in the RTF parser LibreOffice. A specially crafted file can cause a use after free resulting in a possible arbitrary code execution. To exploit the vulnerability a malicious file needs to be opened by the user via vulnerable application.


CVE Name CVE-2016-4324