未評価
It was found that libreoffice before versions 6.0.7 and 6.1.3 was vulnerable to a directory traversal attack which could be used to execute arbitrary...
CVE-2018-16858
SecPulse初出
ディストリビューション別の修正状況
各ディストリビューションが公開している、この CVE の修正パッケージ
- Debian DEBIAN-CVE-2018-16858 libreoffice 修正版: 1:6.1.3-1
原文の説明 取得元が公開している説明をそのまま載せています (多くは英語)。
It was found that libreoffice before versions 6.0.7 and 6.1.3 was vulnerable to a directory traversal attack which could be used to execute arbitrary macros bundled with a document. An attacker could craft a document, which when opened by LibreOffice, would execute a Python method from a script in any arbitrary file system location, specified relative to the LibreOffice install location.
参照URL
- advisory rapid7.com
- advisory access.redhat.com
- advisory libreoffice.org
- report bugzilla.redhat.com
- report packetstormsecurity.com
- report exploit-db.com
- web lists.opensuse.org
- web seclists.org