Debian LTS Advisory ([SECURITY] [DLA 910-1] libreoffice security update)

CVSS Base Vector:
AV:N/AC:L/Au:N/C:P/I:P/A:P

Solution Type:
Vendor Patch

Detection Type:
Linux Distribution Package

Affected Versions:
libreoffice on Debian Linux

Recommendations:
For Debian 7 'Wheezy', these problems have been fixed in version 1:3.5.4+dfsg2-0+deb7u9. We recommend that you upgrade your libreoffice Linux Distribution Packages.

Summary:
CVE-2017-3157 Ben Hayak discovered that objects embedded in Writer and Calc documents may result in information disclosure. CVE-2017-7870 An out-of-bounds write caused by a heap-based buffer overflow was found in the Polygon class.

Detection Method:
This check tests the installed software version using the apt Linux Distribution Package manager.

NIST (National Institute of Standards and Technology) NVD (National Vulnerability Database)

https://nvd.nist.gov/vuln/detail/CVE-2017-3157
https://nvd.nist.gov/vuln/detail/CVE-2017-7870

References:

https://lists.debian.org/debian-lts-announce/2017/04/msg00029.html