CVE-2016-1513

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

The Impress tool in Apache OpenOffice 4.1.2 and earlier allows remote attackers to cause a denial of service (out-of-bounds read or write) or execute arbitrary code via crafted MetaActions in an (1) ODP or (2) OTP file.

Metrics

CVSS 3.0 7.8/10CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-125 CWE-787

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://www.openoffice.org/security/cves/CVE-2016-1513.htmlVendor Advisory
http://www.securityfocus.com/bid/92079Third Party Advisory, VDB Entry
http://www.securitytracker.com/id/1036443
http://www.talosintelligence.com/reports/TALOS-2016-0051/Third Party Advisory
http://www.ubuntu.com/usn/USN-3046-1
https://bz.apache.org/ooo/show_bug.cgi?id=127045Issue Tracking
https://security.gentoo.org/glsa/201703-01
http://www.openoffice.org/security/cves/CVE-2016-1513.htmlVendor Advisory
http://www.securityfocus.com/bid/92079Third Party Advisory, VDB Entry
http://www.securitytracker.com/id/1036443
http://www.talosintelligence.com/reports/TALOS-2016-0051/Third Party Advisory
http://www.ubuntu.com/usn/USN-3046-1
https://bz.apache.org/ooo/show_bug.cgi?id=127045Issue Tracking
https://security.gentoo.org/glsa/201703-01

Timeline

Published: Aug 5, 2016
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2016

CVE-2016-15168.8OpenCV 3.0.0 has a double free issue that allows attackers to execute arbitrary code.CVE-2016-15175.5OpenCV 3.0.0 allows remote attackers to cause a denial of service (segfault) via vectors involving corrupt chunks.CVE-2016-15188.1The auto-provisioning mechanism in the Grandstream Wave app 1.0.1.26 and earlier for Android and Grandstream Video IP phones allows man-in-t CVE-2016-15195.9The com.softphone.common package in the Grandstream Wave app 1.0.1.26 and earlier for Android does not properly validate SSL certificates, w CVE-2016-15207.8The Grandstream Wave app 1.0.1.26 and earlier for Android does not use HTTPS when retrieving update information, which might allow man-in-th CVE-2016-15218.8The directrun function in directmachine.cpp in Libgraphite in Graphite 2 1.2.4, as used in Mozilla Firefox before 43.0 and Firefox ESR 38.x CVE-2016-15228.8Code.cpp in Libgraphite in Graphite 2 1.2.4, as used in Mozilla Firefox before 43.0 and Firefox ESR 38.x before 38.6.1, does not consider re CVE-2016-15236.5The SillMap::readFace function in FeatureMap.cpp in Libgraphite in Graphite 2 1.2.4, as used in Mozilla Firefox before 43.0 and Firefox ESR CVE-2016-15249.6Multiple unrestricted file upload vulnerabilities in NETGEAR Management System NMS300 1.5.0.11 and earlier allow remote attackers to execute CVE-2016-15258.6Directory traversal vulnerability in data/config/image.do in NETGEAR Management System NMS300 1.5.0.11 and earlier allows remote authenticat CVE-2016-15268.1The TtfUtil:LocaLookup function in TtfUtil.cpp in Libgraphite in Graphite 2 1.2.4, as used in Mozilla Firefox before 43.0 and Firefox ESR 38 CVE-2016-15317.0Exim before 4.86.2, when installed setuid root, allows local users to gain privileges via the perl_startup argument.