Unrated
It was found that libreoffice before versions 6.0.7 and 6.1.3 was vulnerable to a directory traversal attack which could be used to execute arbitrary...
CVE-2018-16858
First seen on SecPulse
Fix status by distribution
Fixed packages published by each distribution for this CVE
- Debian DEBIAN-CVE-2018-16858 libreoffice Fixed in: 1:6.1.3-1
Original description The description as published by the source.
It was found that libreoffice before versions 6.0.7 and 6.1.3 was vulnerable to a directory traversal attack which could be used to execute arbitrary macros bundled with a document. An attacker could craft a document, which when opened by LibreOffice, would execute a Python method from a script in any arbitrary file system location, specified relative to the LibreOffice install location.
References
- advisory rapid7.com
- advisory access.redhat.com
- advisory libreoffice.org
- report bugzilla.redhat.com
- report packetstormsecurity.com
- report exploit-db.com
- web lists.opensuse.org
- web seclists.org