LibreOffice is typically bundled with LibreLogo, a programmable turtle vector graphics script, which can execute arbitrary python commands contained with the document it is launched from. LibreOffice also has a feature where documents can specify that pre-installed scripts can be executed on various document script events such as mouse-over, etc. Protection was added to block calling LibreLogo from script event handers. However a Windows 8.3 path equivalence handling flaw left LibreOffice vulnerable under Windows that a document could trigger executing LibreLogo via a Windows filename pseudonym. This issue affects: Document Foundation LibreOffice 6.2 versions prior to 6.2.7; 6.3 versions prior to 6.3.1.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade libreoffice | Aug 22, 2024 | Sep 6, 2019 |
| Suse | — | Upgrade libreoffice-l10n-jaUpgrade libreoffice-l10n-sw_tzUpgrade libreoffice-l10n-loUpgrade libreoffice-librelogoUpgrade libreoffice-l10n-veUpgrade libreoffice-l10n-dgoUpgrade libreoffice-l10n-kmUpgrade libreoffice-l10n-caUpgrade libreoffice-l10n-gugUpgrade libreoffice-l10n-uzUpgrade libreofficekit-develUpgrade libreoffice-l10n-pt_PTUpgrade libreoffice-l10n-enUpgrade libreoffice-l10n-gdUpgrade libreoffice-l10n-mniUpgrade libreoffice-l10n-kabUpgrade libreofficeUpgrade libreoffice-l10n-amUpgrade libreoffice-l10n-euUpgrade libreoffice-l10n-sdUpgrade libreoffice-gladeUpgrade libreoffice-l10n-szlUpgrade libreoffice-l10n-pt_BRUpgrade libreoffice-l10n-kmr_latnUpgrade libreoffice-l10n-xhUpgrade libreoffice-qt5Upgrade libreoffice-l10n-fiUpgrade libreoffice-l10n-ocUpgrade libreoffice-l10n-kaUpgrade libreoffice-l10n-brUpgrade libreoffice-drawUpgrade libreoffice-l10n-sa_inUpgrade libreoffice-mailmergeUpgrade libreoffice-l10n-hsbUpgrade libreoffice-l10n-bsUpgrade libreoffice-l10n-isUpgrade libreoffice-l10n-vecUpgrade libreoffice-l10n-kokUpgrade libreoffice-l10n-nnUpgrade libreoffice-l10n-ugUpgrade libreoffice-base-drivers-firebirdUpgrade libreoffice-calcUpgrade libreofficekitUpgrade libreoffice-l10n-ttUpgrade libreoffice-icon-themesUpgrade libreoffice-l10n-hrUpgrade libreoffice-l10n-mlUpgrade libreoffice-l10n-maiUpgrade libreoffice-l10n-zuUpgrade libreoffice-l10n-ukUpgrade libreoffice-l10n-cyUpgrade libreoffice-l10n-tgUpgrade libreoffice-l10n-satUpgrade libreoffice-l10n-plUpgrade libreoffice-l10n-etUpgrade libreoffice-l10n-frUpgrade libreoffice-l10n-glUpgrade libreoffice-l10n-guUpgrade libreoffice-l10n-svUpgrade libreoffice-gdb-pretty-printersUpgrade libreoffice-l10n-fyUpgrade libreoffice-l10n-nbUpgrade libreoffice-l10n-furUpgrade libreoffice-l10n-boUpgrade libreoffice-l10n-mkUpgrade libreoffice-l10n-myUpgrade libreoffice-l10n-ca_valenciaUpgrade libreoffice-l10n-hiUpgrade libreoffice-l10n-astUpgrade libreoffice-l10n-skUpgrade libreoffice-sdkUpgrade libreoffice-l10n-bgUpgrade libreoffice-gtk2Upgrade libreoffice-l10n-taUpgrade libreoffice-writer-extensionsUpgrade libreoffice-l10n-nlUpgrade libreoffice-l10n-siUpgrade libreoffice-l10n-ltUpgrade libreoffice-l10n-afUpgrade libreoffice-branding-upstreamUpgrade libreoffice-gnomeUpgrade libreoffice-l10n-csUpgrade libreoffice-l10n-gaUpgrade libreoffice-l10n-knUpgrade libreoffice-l10n-rwUpgrade libreoffice-l10n-ksUpgrade libreoffice-l10n-asUpgrade libreoffice-l10n-roUpgrade libreoffice-l10n-paUpgrade libreoffice-l10n-bnUpgrade libreoffice-l10n-bn_inUpgrade libreoffice-calc-extensionsUpgrade libreoffice-l10n-kkUpgrade libreoffice-l10n-trUpgrade libreoffice-l10n-itUpgrade libreoffice-l10n-huUpgrade libreoffice-l10n-idUpgrade libreoffice-baseUpgrade libreoffice-writerUpgrade libreoffice-impressUpgrade libreoffice-l10n-viUpgrade libreoffice-pyunoUpgrade libreoffice-officebeanUpgrade libreoffice-l10n-zh_TWUpgrade libreoffice-l10n-ssUpgrade libreoffice-l10n-nsoUpgrade libreoffice-l10n-lvUpgrade libreoffice-l10n-eoUpgrade libreoffice-l10n-sqUpgrade libreoffice-l10n-tsUpgrade libreoffice-l10n-teUpgrade libreoffice-l10n-neUpgrade libreoffice-l10n-srUpgrade libreoffice-l10n-en_gbUpgrade libreoffice-l10n-faUpgrade libreoffice-l10n-slUpgrade libreoffice-l10n-dsbUpgrade libreoffice-gtk3Upgrade libreoffice-l10n-elUpgrade libreoffice-l10n-daUpgrade libreoffice-l10n-en_zaUpgrade libreoffice-base-drivers-postgresqlUpgrade libreoffice-l10n-lbUpgrade libreoffice-l10n-brxUpgrade libreoffice-sdk-docUpgrade libreoffice-l10n-deUpgrade libreoffice-l10n-thUpgrade libreoffice-mathUpgrade libreoffice-l10n-tnUpgrade libreoffice-l10n-stUpgrade libreoffice-l10n-koUpgrade libreoffice-l10n-omUpgrade libreoffice-l10n-zh_CNUpgrade libreoffice-l10n-mnUpgrade libreoffice-l10n-mrUpgrade libreoffice-l10n-heUpgrade libreoffice-filters-optionalUpgrade libreoffice-l10n-arUpgrade libreoffice-l10n-ckbUpgrade libreoffice-l10n-sidUpgrade libreoffice-l10n-ruUpgrade libreoffice-l10n-dzUpgrade libreoffice-l10n-esUpgrade libreoffice-l10n-beUpgrade libreoffice-l10n-orUpgrade libreoffice-l10n-nr | Sep 19, 2019 | Sep 6, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub