LibreOffice is typically bundled with LibreLogo, a programmable turtle vector graphics script, which can execute arbitrary python commands contained with the document it is launched from. LibreOffice also has a feature where documents can specify that pre-installed scripts can be executed on various document script events such as mouse-over, etc. Protection was added to block calling LibreLogo from script event handers. However a Windows 8.3 path equivalence handling flaw left LibreOffice vulnerable under Windows that a document could trigger executing LibreLogo via a Windows filename pseudonym. This issue affects: Document Foundation LibreOffice 6.2 versions prior to 6.2.7; 6.3 versions prior to 6.3.1.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade libreoffice | Aug 22, 2024 | Sep 6, 2019 |
| Suse | — | Upgrade libreoffice-l10n-stUpgrade libreoffice-l10n-zh_CNUpgrade libreoffice-l10n-idUpgrade libreoffice-l10n-eoUpgrade libreoffice-l10n-asUpgrade libreoffice-l10n-ltUpgrade libreoffice-l10n-afUpgrade libreoffice-writerUpgrade libreoffice-l10n-csUpgrade libreoffice-l10n-gaUpgrade libreoffice-l10n-knUpgrade libreoffice-l10n-sidUpgrade libreoffice-l10n-trUpgrade libreoffice-l10n-ruUpgrade libreoffice-sdk-docUpgrade libreoffice-l10n-mnUpgrade libreoffice-l10n-arUpgrade libreoffice-l10n-daUpgrade libreoffice-sdkUpgrade libreoffice-l10n-beUpgrade libreoffice-l10n-dzUpgrade libreoffice-l10n-en_zaUpgrade libreoffice-filters-optionalUpgrade libreoffice-l10n-esUpgrade libreoffice-l10n-lvUpgrade libreoffice-l10n-orUpgrade libreoffice-l10n-roUpgrade libreoffice-l10n-zh_TWUpgrade libreoffice-l10n-lbUpgrade libreoffice-l10n-mrUpgrade libreoffice-l10n-paUpgrade libreoffice-mathUpgrade libreoffice-branding-upstreamUpgrade libreoffice-l10n-nrUpgrade libreoffice-l10n-rwUpgrade libreoffice-l10n-elUpgrade libreoffice-l10n-bgUpgrade libreoffice-pyunoUpgrade libreoffice-calc-extensionsUpgrade libreoffice-l10n-koUpgrade libreoffice-l10n-skUpgrade libreoffice-l10n-omUpgrade libreoffice-writer-extensionsUpgrade libreoffice-l10n-heUpgrade libreoffice-l10n-bnUpgrade libreoffice-l10n-thUpgrade libreoffice-l10n-tnUpgrade libreoffice-l10n-nlUpgrade libreoffice-gnomeUpgrade libreoffice-l10n-brxUpgrade libreoffice-l10n-siUpgrade libreoffice-l10n-neUpgrade libreoffice-base-drivers-postgresqlUpgrade libreoffice-l10n-srUpgrade libreoffice-l10n-tsUpgrade libreoffice-l10n-sqUpgrade libreoffice-l10n-slUpgrade libreoffice-l10n-faUpgrade libreoffice-l10n-dsbUpgrade libreoffice-l10n-en_gbUpgrade libreoffice-l10n-viUpgrade libreoffice-l10n-astUpgrade libreoffice-l10n-taUpgrade libreoffice-l10n-ckbUpgrade libreoffice-gtk2Upgrade libreoffice-l10n-kkUpgrade libreoffice-l10n-hiUpgrade libreoffice-l10n-teUpgrade libreoffice-gtk3Upgrade libreoffice-l10n-bn_inUpgrade libreoffice-l10n-deUpgrade libreoffice-l10n-ksUpgrade libreoffice-officebeanUpgrade libreoffice-l10n-ssUpgrade libreoffice-impressUpgrade libreoffice-l10n-nsoUpgrade libreoffice-baseUpgrade libreoffice-l10n-huUpgrade libreoffice-l10n-itUpgrade libreofficekit-develUpgrade libreoffice-l10n-hrUpgrade libreoffice-l10n-uzUpgrade libreoffice-l10n-ttUpgrade libreoffice-l10n-maiUpgrade libreoffice-l10n-gugUpgrade libreoffice-l10n-caUpgrade libreoffice-l10n-brUpgrade libreoffice-drawUpgrade libreoffice-l10n-kaUpgrade libreoffice-qt5Upgrade libreoffice-l10n-zuUpgrade libreoffice-l10n-xhUpgrade libreoffice-l10n-mniUpgrade libreoffice-l10n-sw_tzUpgrade libreoffice-l10n-loUpgrade libreoffice-l10n-kmUpgrade libreoffice-l10n-veUpgrade libreoffice-librelogoUpgrade libreoffice-l10n-jaUpgrade libreoffice-l10n-boUpgrade libreoffice-gladeUpgrade libreoffice-l10n-dgoUpgrade libreoffice-l10n-plUpgrade libreoffice-l10n-frUpgrade libreoffice-l10n-glUpgrade libreoffice-l10n-sa_inUpgrade libreoffice-mailmergeUpgrade libreoffice-icon-themesUpgrade libreoffice-l10n-fyUpgrade libreoffice-l10n-gdUpgrade libreoffice-l10n-kabUpgrade libreoffice-l10n-fiUpgrade libreoffice-l10n-amUpgrade libreoffice-l10n-enUpgrade libreoffice-l10n-euUpgrade libreoffice-l10n-sdUpgrade libreofficekitUpgrade libreofficeUpgrade libreoffice-l10n-szlUpgrade libreoffice-calcUpgrade libreoffice-l10n-pt_BRUpgrade libreoffice-l10n-mlUpgrade libreoffice-l10n-ocUpgrade libreoffice-l10n-nnUpgrade libreoffice-base-drivers-firebirdUpgrade libreoffice-l10n-mkUpgrade libreoffice-l10n-satUpgrade libreoffice-l10n-tgUpgrade libreoffice-l10n-myUpgrade libreoffice-l10n-hsbUpgrade libreoffice-l10n-guUpgrade libreoffice-l10n-etUpgrade libreoffice-l10n-vecUpgrade libreoffice-l10n-nbUpgrade libreoffice-l10n-furUpgrade libreoffice-gdb-pretty-printersUpgrade libreoffice-l10n-svUpgrade libreoffice-l10n-ca_valenciaUpgrade libreoffice-l10n-isUpgrade libreoffice-l10n-cyUpgrade libreoffice-l10n-kokUpgrade libreoffice-l10n-ukUpgrade libreoffice-l10n-bsUpgrade libreoffice-l10n-ugUpgrade libreoffice-l10n-kmr_latnUpgrade libreoffice-l10n-pt_PT | Sep 19, 2019 | Sep 6, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub