LibreOffice is typically bundled with LibreLogo, a programmable turtle vector graphics script, which can execute arbitrary python commands contained with the document it is launched from. LibreOffice also has a feature where documents can specify that pre-installed scripts can be executed on various document script events such as mouse-over, etc. Protection was added to block calling LibreLogo from script event handers. However a Windows 8.3 path equivalence handling flaw left LibreOffice vulnerable under Windows that a document could trigger executing LibreLogo via a Windows filename pseudonym. This issue affects: Document Foundation LibreOffice 6.2 versions prior to 6.2.7; 6.3 versions prior to 6.3.1.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade libreoffice | Aug 22, 2024 | Sep 6, 2019 |
| Suse | — | Upgrade libreoffice-l10n-nbUpgrade libreoffice-l10n-fyUpgrade libreoffice-l10n-szlUpgrade libreoffice-l10n-mlUpgrade libreoffice-l10n-pt_BRUpgrade libreoffice-l10n-dgoUpgrade libreoffice-icon-themesUpgrade libreoffice-l10n-sw_tzUpgrade libreoffice-l10n-brUpgrade libreoffice-l10n-zuUpgrade libreoffice-l10n-ca_valenciaUpgrade libreoffice-l10n-kokUpgrade libreoffice-mailmergeUpgrade libreoffice-l10n-isUpgrade libreoffice-base-drivers-firebirdUpgrade libreoffice-l10n-mniUpgrade libreoffice-l10n-veUpgrade libreoffice-l10n-furUpgrade libreoffice-qt5Upgrade libreoffice-l10n-nnUpgrade libreoffice-l10n-svUpgrade libreoffice-drawUpgrade libreoffice-l10n-kaUpgrade libreoffice-l10n-gugUpgrade libreoffice-l10n-uzUpgrade libreoffice-l10n-caUpgrade libreoffice-l10n-pt_PTUpgrade libreoffice-l10n-sa_inUpgrade libreoffice-l10n-ocUpgrade libreoffice-l10n-kmr_latnUpgrade libreoffice-l10n-sdUpgrade libreofficeUpgrade libreoffice-l10n-amUpgrade libreoffice-l10n-euUpgrade libreoffice-l10n-enUpgrade libreoffice-l10n-kabUpgrade libreoffice-l10n-xhUpgrade libreoffice-l10n-hrUpgrade libreoffice-l10n-myUpgrade libreoffice-l10n-ttUpgrade libreoffice-l10n-jaUpgrade libreoffice-l10n-bsUpgrade libreoffice-l10n-hsbUpgrade libreoffice-l10n-cyUpgrade libreofficekit-develUpgrade libreoffice-l10n-plUpgrade libreoffice-l10n-guUpgrade libreoffice-l10n-satUpgrade libreoffice-l10n-etUpgrade libreoffice-l10n-tgUpgrade libreoffice-l10n-fiUpgrade libreoffice-l10n-glUpgrade libreoffice-l10n-mkUpgrade libreoffice-l10n-ukUpgrade libreoffice-librelogoUpgrade libreoffice-l10n-kmUpgrade libreofficekitUpgrade libreoffice-l10n-loUpgrade libreoffice-gladeUpgrade libreoffice-l10n-gdUpgrade libreoffice-l10n-boUpgrade libreoffice-calcUpgrade libreoffice-gdb-pretty-printersUpgrade libreoffice-l10n-vecUpgrade libreoffice-l10n-frUpgrade libreoffice-l10n-ugUpgrade libreoffice-l10n-maiUpgrade libreoffice-l10n-ksUpgrade libreoffice-l10n-rwUpgrade libreoffice-l10n-beUpgrade libreoffice-l10n-afUpgrade libreoffice-l10n-tsUpgrade libreoffice-writer-extensionsUpgrade libreoffice-l10n-nrUpgrade libreoffice-l10n-skUpgrade libreoffice-l10n-bn_inUpgrade libreoffice-l10n-elUpgrade libreoffice-l10n-mnUpgrade libreoffice-l10n-omUpgrade libreoffice-l10n-esUpgrade libreoffice-l10n-orUpgrade libreoffice-l10n-ruUpgrade libreoffice-gtk2Upgrade libreoffice-l10n-bgUpgrade libreoffice-l10n-astUpgrade libreoffice-l10n-hiUpgrade libreoffice-l10n-ckbUpgrade libreoffice-l10n-itUpgrade libreoffice-l10n-idUpgrade libreoffice-l10n-huUpgrade libreoffice-impressUpgrade libreoffice-baseUpgrade libreoffice-writerUpgrade libreoffice-l10n-viUpgrade libreoffice-pyunoUpgrade libreoffice-officebeanUpgrade libreoffice-l10n-zh_TWUpgrade libreoffice-l10n-ssUpgrade libreoffice-l10n-nsoUpgrade libreoffice-l10n-eoUpgrade libreoffice-l10n-lvUpgrade libreoffice-l10n-arUpgrade libreoffice-l10n-asUpgrade libreoffice-l10n-knUpgrade libreoffice-l10n-trUpgrade libreoffice-l10n-csUpgrade libreoffice-l10n-sidUpgrade libreoffice-l10n-gaUpgrade libreoffice-l10n-ltUpgrade libreoffice-l10n-teUpgrade libreoffice-l10n-slUpgrade libreoffice-l10n-srUpgrade libreoffice-l10n-sqUpgrade libreoffice-l10n-neUpgrade libreoffice-l10n-en_gbUpgrade libreoffice-gtk3Upgrade libreoffice-l10n-dsbUpgrade libreoffice-l10n-daUpgrade libreoffice-sdkUpgrade libreoffice-l10n-dzUpgrade libreoffice-l10n-en_zaUpgrade libreoffice-l10n-koUpgrade libreoffice-l10n-mrUpgrade libreoffice-filters-optionalUpgrade libreoffice-l10n-roUpgrade libreoffice-l10n-heUpgrade libreoffice-l10n-stUpgrade libreoffice-l10n-paUpgrade libreoffice-l10n-nlUpgrade libreoffice-l10n-siUpgrade libreoffice-l10n-kkUpgrade libreoffice-l10n-lbUpgrade libreoffice-l10n-brxUpgrade libreoffice-gnomeUpgrade libreoffice-branding-upstreamUpgrade libreoffice-mathUpgrade libreoffice-l10n-tnUpgrade libreoffice-sdk-docUpgrade libreoffice-l10n-thUpgrade libreoffice-l10n-taUpgrade libreoffice-base-drivers-postgresqlUpgrade libreoffice-l10n-zh_CNUpgrade libreoffice-l10n-faUpgrade libreoffice-calc-extensionsUpgrade libreoffice-l10n-bnUpgrade libreoffice-l10n-de | Sep 19, 2019 | Sep 6, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub