CVE-2017-7870

Name	CVE-2017-7870
Description	LibreOffice before 2017-01-02 has an out-of-bounds write caused by a heap-based buffer overflow related to the tools::Polygon::Insert function in tools/source/generic/poly.cxx.
Source	CVE (at NVD; CERT, LWN, oss-sec, fulldisc, bugtraq, EDB, Metasploit, Red Hat, Ubuntu, Gentoo, SUSE bugzilla/CVE, Mageia, GitHub code/issues, web search, more)
References	DLA-910-1, DSA-3837-1
NVD severity	high

Vulnerable and fixed packages

The table below lists information on source packages.

Source Package	Release	Version	Status
libreoffice (PTS)	stretch (security), stretch	1:5.2.7-1+deb9u11	fixed
	buster	1:6.1.5-3+deb10u6	fixed
	buster (security)	1:6.1.5-3+deb10u4	fixed
	bullseye, sid	1:7.0.4-3	fixed

The information below is based on the following data on fixed versions.

Package	Type	Release	Fixed Version	Origin
libreoffice	source	wheezy	1:3.5.4+dfsg2-0+deb7u9	DLA-910-1
libreoffice	source	jessie	1:4.3.3-2+deb8u7	DSA-3837-1
libreoffice	source	(unstable)	1:5.2.5-1

Fixed by: https://github.com/LibreOffice/core/commit/62a97e6a561ce65e88d4c537a1b82c336f012722