CVE-2018-10120 vulnerability in LibreOffice and Other Products
Published on April 16, 2018
The SwCTBWrapper::Read function in sw/source/filter/ww8/ww8toolbar.cxx in LibreOffice before 5.4.6.1 and 6.x before 6.0.2.1 does not validate a customizations index, which allows remote attackers to cause a denial of service (heap-based buffer overflow with write access) or possibly have unspecified other impact via a crafted document that contains a certain Microsoft Word record.
Products Associated with CVE-2018-10120
You can be notified by email with stack.watch whenever vulnerabilities like CVE-2018-10120 are published in these products:
Exploit Probability
EPSS
2.10%
Percentile
80.88%
EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.