Non évaluée
It was found that libreoffice before versions 6.0.7 and 6.1.3 was vulnerable to a directory traversal attack which could be used to execute arbitrary...
CVE-2018-16858
Première détection SecPulse
État des correctifs par distribution
Paquets corrigés publiés par chaque distribution pour cette CVE
- Debian DEBIAN-CVE-2018-16858 libreoffice Corrigé dans: 1:6.1.3-1
Description d'origine La description telle que publiée par la source (souvent en anglais).
It was found that libreoffice before versions 6.0.7 and 6.1.3 was vulnerable to a directory traversal attack which could be used to execute arbitrary macros bundled with a document. An attacker could craft a document, which when opened by LibreOffice, would execute a Python method from a script in any arbitrary file system location, specified relative to the LibreOffice install location.
Références
- advisory rapid7.com
- advisory access.redhat.com
- advisory libreoffice.org
- report bugzilla.redhat.com
- report packetstormsecurity.com
- report exploit-db.com
- web lists.opensuse.org
- web seclists.org