CVE-2017-7870

Name	CVE-2017-7870
Description	LibreOffice before 2017-01-02 has an out-of-bounds write caused by a heap-based buffer overflow related to the tools::Polygon::Insert function in tools/source/generic/poly.cxx.
Source	CVE (at NVD; CERT, LWN, oss-sec, fulldisc, bugtraq, EDB, Metasploit, Red Hat, Ubuntu, Gentoo, SUSE bugzilla/CVE, Mageia, GitHub code/issues, web search, more)
References	DLA-910-1, DSA-3837-1
NVD severity	high (attack range: remote)

Vulnerable and fixed packages

The table below lists information on source packages.

Source Package	Release	Version	Status
libreoffice (PTS)	jessie (security), jessie	1:4.3.3-2+deb8u11	fixed
	stretch (security), stretch	1:5.2.7-1+deb9u4	fixed
	buster, sid	1:6.1.0-1	fixed

The information below is based on the following data on fixed versions.

Package	Type	Release	Fixed Version	Urgency	Origin
libreoffice	source	(unstable)	1:5.2.5-1	high
libreoffice	source	jessie	1:4.3.3-2+deb8u7	high	DSA-3837-1
libreoffice	source	wheezy	1:3.5.4+dfsg2-0+deb7u9	high	DLA-910-1

Fixed by: https://github.com/LibreOffice/core/commit/62a97e6a561ce65e88d4c537a1b82c336f012722