What’s Vulnerable › Vulnerabilities

CVE-2016-4324

• Severity: high (CVSS 7.8 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 2.8% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2016-07-08 · updated 2026-06-17
• Weakness: CWE-20

Description

Use-after-free vulnerability in LibreOffice before 5.1.4 allows remote attackers to execute arbitrary code via a crafted RTF file, related to stylesheet and superscript tokens.

Affected products

• Canonical Ubuntu Linux: 12.04, 15.10, 16.04
• Debian Linux: 8.0
• The Document Foundation LibreOffice: through 5.1.3

References

• http://www.debian.org/security/2016/dsa-3608
• http://www.libreoffice.org/about-us/security/advisories/cve-2016-4324/
• http://www.securityfocus.com/bid/91499
• http://www.securitytracker.com/id/1036209
• http://www.talosintelligence.com/reports/TALOS-2016-0126/
• http://www.ubuntu.com/usn/USN-3022-1
• https://security.gentoo.org/glsa/201611-03
• http://www.debian.org/security/2016/dsa-3608
• http://www.libreoffice.org/about-us/security/advisories/cve-2016-4324/
• http://www.securityfocus.com/bid/91499
• http://www.securitytracker.com/id/1036209
• http://www.talosintelligence.com/reports/TALOS-2016-0126/

Get alerted when CVE-2016-4324 or the next vulnerability affects your stack