CyberRota Analysis
AI-GeneratedA stack-based buffer overflow vulnerability in GNU libextractor affects the processing of malicious StarOffice documents, allowing attackers to exploit this flaw by crafting documents that can allocate excessive stack memory. This can lead to application crashes when extracting metadata, posing a significant risk to systems handling such documents. Organizations using affected versions of Office should prioritize patching to mitigate potential disruptions and security breaches.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
GNU libextractor before 1.15 contains a stack-based buffer overflow vulnerability in the process_star_office function that sizes a variable-length stack array from attacker-controlled OLE2 stream data. Attackers can craft malicious StarOffice documents that allocate up to 4 MB on the stack, causing stack overflow and crashing any application extracting metadata from the document.