LibreOffice is typically bundled with LibreLogo, a programmable turtle vector graphics script, which can execute arbitrary python commands contained with the document it is launched from. LibreOffice also has a feature where documents can specify that pre-installed scripts can be executed on various document script events such as mouse-over, etc. Protection was added to block calling LibreLogo from script event handers. However a Windows 8.3 path equivalence handling flaw left LibreOffice vulnerable under Windows that a document could trigger executing LibreLogo via a Windows filename pseudonym. This issue affects: Document Foundation LibreOffice 6.2 versions prior to 6.2.7; 6.3 versions prior to 6.3.1.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade libreoffice | Aug 22, 2024 | Sep 6, 2019 |
| Suse | — | Upgrade libreoffice-l10n-asUpgrade libreoffice-filters-optionalUpgrade libreoffice-writer-extensionsUpgrade libreoffice-l10n-bgUpgrade libreoffice-l10n-heUpgrade libreoffice-l10n-dsbUpgrade libreoffice-l10n-ltUpgrade libreoffice-l10n-huUpgrade libreoffice-l10n-knUpgrade libreoffice-l10n-afUpgrade libreoffice-l10n-srUpgrade libreoffice-l10n-tnUpgrade libreoffice-l10n-slUpgrade libreoffice-gnomeUpgrade libreoffice-l10n-en_gbUpgrade libreoffice-l10n-brxUpgrade libreoffice-l10n-lbUpgrade libreoffice-l10n-nlUpgrade libreoffice-l10n-paUpgrade libreoffice-l10n-thUpgrade libreoffice-branding-upstreamUpgrade libreoffice-l10n-eoUpgrade libreoffice-pyunoUpgrade libreoffice-baseUpgrade libreoffice-l10n-lvUpgrade libreoffice-l10n-ssUpgrade libreoffice-l10n-viUpgrade libreoffice-officebeanUpgrade libreoffice-l10n-csUpgrade libreoffice-l10n-tsUpgrade libreoffice-l10n-sidUpgrade libreoffice-l10n-faUpgrade libreoffice-gtk2Upgrade libreoffice-l10n-sqUpgrade libreoffice-l10n-trUpgrade libreoffice-l10n-hiUpgrade libreoffice-sdkUpgrade libreoffice-l10n-mrUpgrade libreoffice-l10n-taUpgrade libreoffice-l10n-astUpgrade libreoffice-l10n-idUpgrade libreoffice-l10n-koUpgrade libreoffice-l10n-zh_CNUpgrade libreoffice-l10n-mnUpgrade libreoffice-l10n-gaUpgrade libreoffice-gtk3Upgrade libreoffice-l10n-stUpgrade libreoffice-l10n-neUpgrade libreoffice-writerUpgrade libreoffice-impressUpgrade libreoffice-l10n-nsoUpgrade libreoffice-l10n-beUpgrade libreoffice-l10n-itUpgrade libreoffice-l10n-omUpgrade libreoffice-l10n-roUpgrade libreoffice-sdk-docUpgrade libreoffice-l10n-esUpgrade libreoffice-l10n-elUpgrade libreoffice-l10n-ksUpgrade libreoffice-l10n-rwUpgrade libreoffice-l10n-deUpgrade libreoffice-l10n-skUpgrade libreoffice-l10n-orUpgrade libreoffice-l10n-nrUpgrade libreoffice-l10n-daUpgrade libreoffice-l10n-dzUpgrade libreoffice-l10n-en_zaUpgrade libreoffice-base-drivers-postgresqlUpgrade libreoffice-l10n-ruUpgrade libreoffice-l10n-arUpgrade libreoffice-calc-extensionsUpgrade libreoffice-l10n-bnUpgrade libreoffice-l10n-bn_inUpgrade libreoffice-l10n-ckbUpgrade libreoffice-l10n-teUpgrade libreoffice-l10n-zh_TWUpgrade libreoffice-l10n-siUpgrade libreoffice-l10n-kkUpgrade libreoffice-mathUpgrade libreoffice-l10n-xhUpgrade libreoffice-l10n-pt_BRUpgrade libreoffice-l10n-kokUpgrade libreoffice-base-drivers-firebirdUpgrade libreoffice-gdb-pretty-printersUpgrade libreoffice-l10n-isUpgrade libreoffice-l10n-zuUpgrade libreoffice-l10n-furUpgrade libreoffice-l10n-glUpgrade libreoffice-l10n-satUpgrade libreoffice-l10n-myUpgrade libreoffice-l10n-tgUpgrade libreoffice-l10n-szlUpgrade libreoffice-l10n-hrUpgrade libreoffice-calcUpgrade libreoffice-l10n-maiUpgrade libreoffice-l10n-ttUpgrade libreoffice-l10n-ocUpgrade libreoffice-l10n-ca_valenciaUpgrade libreoffice-icon-themesUpgrade libreoffice-l10n-hsbUpgrade libreoffice-l10n-etUpgrade libreoffice-mailmergeUpgrade libreoffice-librelogoUpgrade libreoffice-l10n-veUpgrade libreoffice-l10n-sw_tzUpgrade libreoffice-l10n-kmUpgrade libreoffice-l10n-dgoUpgrade libreoffice-l10n-boUpgrade libreoffice-l10n-loUpgrade libreoffice-l10n-jaUpgrade libreoffice-qt5Upgrade libreoffice-l10n-pt_PTUpgrade libreoffice-l10n-kmr_latnUpgrade libreoffice-l10n-kaUpgrade libreoffice-l10n-brUpgrade libreoffice-drawUpgrade libreoffice-l10n-gugUpgrade libreoffice-l10n-fiUpgrade libreofficeUpgrade libreoffice-l10n-uzUpgrade libreoffice-gladeUpgrade libreoffice-l10n-fyUpgrade libreoffice-l10n-frUpgrade libreoffice-l10n-vecUpgrade libreoffice-l10n-mniUpgrade libreoffice-l10n-enUpgrade libreoffice-l10n-amUpgrade libreoffice-l10n-sdUpgrade libreoffice-l10n-svUpgrade libreoffice-l10n-ugUpgrade libreoffice-l10n-bsUpgrade libreoffice-l10n-cyUpgrade libreoffice-l10n-ukUpgrade libreoffice-l10n-caUpgrade libreoffice-l10n-nnUpgrade libreoffice-l10n-guUpgrade libreoffice-l10n-mkUpgrade libreoffice-l10n-kabUpgrade libreoffice-l10n-gdUpgrade libreofficekit-develUpgrade libreoffice-l10n-nbUpgrade libreoffice-l10n-plUpgrade libreoffice-l10n-mlUpgrade libreoffice-l10n-euUpgrade libreofficekitUpgrade libreoffice-l10n-sa_in | Sep 19, 2019 | Sep 6, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub