Vulnerable MSVC++ runtime distributed with LibreOffice 5.0.0 for Windows

Posted by Stefan Kanthak on Aug 06

Hi @ll,

the just released latest version 5.0.0.5 of LibreOffice.org for Windows
distributes (once again) a completely outdated and vulnerable MSVC++
runtime.

The installer package LibreOffice_5.0.0_Win_x86.msi contains the files

msvcp80.dll 8.0.50727.42
msvcr80.dll 8.0.50727.42
Microsoft.VC80.CRT.manifest 8.0.50727.42

of the initial/RTM release of the MSVC++ Runtime 2005.

These DLLs have been updated serveral times since their…

007 Software