It was found that libreoffice before versions 6.0.7 and 6.1.3 was vulnerable to a directory traversal attack which could be used to execute arbitrary macros bundled with a document. An attacker could craft a document, which when opened by LibreOffice, would execute a Python method from a script in any arbitrary file system location, specified relative to the LibreOffice install location.
oryginał ENCVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:HLibreoffice
APPLibreoffice< 6.0.76.1.0 – 6.1.3 (bez)
Powiązane podatności
LibreOffice LibreOfficeKit — wyłączona weryfikacja certyfikatów TLS
LibreOffice is typically bundled with LibreLogo, a programmable turtle vector graphics script, which can execu...
LibreOffice is typically bundled with LibreLogo, a programmable turtle vector graphics script, which can execu...
LibreOffice is typically bundled with LibreLogo, a programmable turtle vector graphics script, which can execu...
LibreOffice has a feature where documents can specify that pre-installed scripts can be executed on various do...