vulnerability

Oracle Linux: CVE-2017-3157: ELSA-2017-0979: libreoffice security update (MODERATE) (Multiple Advisories)

Severity
4
CVSS
(AV:L/AC:H/Au:N/C:C/I:N/A:N)
Published
Feb 22, 2017
Added
Apr 13, 2017
Modified
Jan 7, 2025

Description

By exploiting the way Apache OpenOffice before 4.1.4 renders embedded objects, an attacker could craft a document that allows reading in a file from the user's filesystem. Information could be retrieved by the attacker by, e.g., using hidden sections to store the information, tricking the user into saving the document and convincing the user to send the document back to the attacker. The vulnerability is mitigated by the need for the attacker to know the precise file path in the target system, and the need to trick the user into saving the document and sending it back.
It was found that LibreOffice disclosed contents of a file specified in an embedded object's preview. An attacker could potentially use this flaw to expose details of a system running LibreOffice as an online service via a crafted document.

Solution(s)

oracle-linux-upgrade-autocorr-aforacle-linux-upgrade-autocorr-bgoracle-linux-upgrade-autocorr-caoracle-linux-upgrade-autocorr-csoracle-linux-upgrade-autocorr-daoracle-linux-upgrade-autocorr-deoracle-linux-upgrade-autocorr-enoracle-linux-upgrade-autocorr-esoracle-linux-upgrade-autocorr-faoracle-linux-upgrade-autocorr-fioracle-linux-upgrade-autocorr-froracle-linux-upgrade-autocorr-gaoracle-linux-upgrade-autocorr-hroracle-linux-upgrade-autocorr-huoracle-linux-upgrade-autocorr-isoracle-linux-upgrade-autocorr-itoracle-linux-upgrade-autocorr-jaoracle-linux-upgrade-autocorr-kooracle-linux-upgrade-autocorr-lboracle-linux-upgrade-autocorr-ltoracle-linux-upgrade-autocorr-mnoracle-linux-upgrade-autocorr-nloracle-linux-upgrade-autocorr-ploracle-linux-upgrade-autocorr-ptoracle-linux-upgrade-autocorr-rooracle-linux-upgrade-autocorr-ruoracle-linux-upgrade-autocorr-skoracle-linux-upgrade-autocorr-sloracle-linux-upgrade-autocorr-sroracle-linux-upgrade-autocorr-svoracle-linux-upgrade-autocorr-troracle-linux-upgrade-autocorr-vioracle-linux-upgrade-autocorr-zhoracle-linux-upgrade-libreofficeoracle-linux-upgrade-libreoffice-baseoracle-linux-upgrade-libreoffice-bshoracle-linux-upgrade-libreoffice-calcoracle-linux-upgrade-libreoffice-coreoracle-linux-upgrade-libreoffice-draworacle-linux-upgrade-libreoffice-emailmergeoracle-linux-upgrade-libreoffice-filtersoracle-linux-upgrade-libreoffice-gdb-debug-supportoracle-linux-upgrade-libreoffice-gladeoracle-linux-upgrade-libreoffice-graphicfilteroracle-linux-upgrade-libreoffice-headlessoracle-linux-upgrade-libreoffice-impressoracle-linux-upgrade-libreoffice-langpack-aforacle-linux-upgrade-libreoffice-langpack-aroracle-linux-upgrade-libreoffice-langpack-asoracle-linux-upgrade-libreoffice-langpack-bgoracle-linux-upgrade-libreoffice-langpack-bnoracle-linux-upgrade-libreoffice-langpack-broracle-linux-upgrade-libreoffice-langpack-caoracle-linux-upgrade-libreoffice-langpack-csoracle-linux-upgrade-libreoffice-langpack-cyoracle-linux-upgrade-libreoffice-langpack-daoracle-linux-upgrade-libreoffice-langpack-deoracle-linux-upgrade-libreoffice-langpack-dzoracle-linux-upgrade-libreoffice-langpack-eloracle-linux-upgrade-libreoffice-langpack-enoracle-linux-upgrade-libreoffice-langpack-esoracle-linux-upgrade-libreoffice-langpack-etoracle-linux-upgrade-libreoffice-langpack-euoracle-linux-upgrade-libreoffice-langpack-faoracle-linux-upgrade-libreoffice-langpack-fioracle-linux-upgrade-libreoffice-langpack-froracle-linux-upgrade-libreoffice-langpack-gaoracle-linux-upgrade-libreoffice-langpack-gloracle-linux-upgrade-libreoffice-langpack-guoracle-linux-upgrade-libreoffice-langpack-heoracle-linux-upgrade-libreoffice-langpack-hioracle-linux-upgrade-libreoffice-langpack-hroracle-linux-upgrade-libreoffice-langpack-huoracle-linux-upgrade-libreoffice-langpack-itoracle-linux-upgrade-libreoffice-langpack-jaoracle-linux-upgrade-libreoffice-langpack-kkoracle-linux-upgrade-libreoffice-langpack-knoracle-linux-upgrade-libreoffice-langpack-kooracle-linux-upgrade-libreoffice-langpack-ltoracle-linux-upgrade-libreoffice-langpack-lvoracle-linux-upgrade-libreoffice-langpack-maioracle-linux-upgrade-libreoffice-langpack-mloracle-linux-upgrade-libreoffice-langpack-mroracle-linux-upgrade-libreoffice-langpack-msoracle-linux-upgrade-libreoffice-langpack-nboracle-linux-upgrade-libreoffice-langpack-nloracle-linux-upgrade-libreoffice-langpack-nnoracle-linux-upgrade-libreoffice-langpack-nroracle-linux-upgrade-libreoffice-langpack-nsooracle-linux-upgrade-libreoffice-langpack-ororacle-linux-upgrade-libreoffice-langpack-paoracle-linux-upgrade-libreoffice-langpack-ploracle-linux-upgrade-libreoffice-langpack-pt-broracle-linux-upgrade-libreoffice-langpack-pt-ptoracle-linux-upgrade-libreoffice-langpack-rooracle-linux-upgrade-libreoffice-langpack-ruoracle-linux-upgrade-libreoffice-langpack-sioracle-linux-upgrade-libreoffice-langpack-skoracle-linux-upgrade-libreoffice-langpack-sloracle-linux-upgrade-libreoffice-langpack-sroracle-linux-upgrade-libreoffice-langpack-ssoracle-linux-upgrade-libreoffice-langpack-storacle-linux-upgrade-libreoffice-langpack-svoracle-linux-upgrade-libreoffice-langpack-taoracle-linux-upgrade-libreoffice-langpack-teoracle-linux-upgrade-libreoffice-langpack-thoracle-linux-upgrade-libreoffice-langpack-tnoracle-linux-upgrade-libreoffice-langpack-troracle-linux-upgrade-libreoffice-langpack-tsoracle-linux-upgrade-libreoffice-langpack-ukoracle-linux-upgrade-libreoffice-langpack-uroracle-linux-upgrade-libreoffice-langpack-veoracle-linux-upgrade-libreoffice-langpack-xhoracle-linux-upgrade-libreoffice-langpack-zh-hansoracle-linux-upgrade-libreoffice-langpack-zh-hantoracle-linux-upgrade-libreoffice-langpack-zuoracle-linux-upgrade-libreoffice-librelogooracle-linux-upgrade-libreoffice-mathoracle-linux-upgrade-libreoffice-nlpsolveroracle-linux-upgrade-libreoffice-officebeanoracle-linux-upgrade-libreoffice-ogltransoracle-linux-upgrade-libreoffice-opensymbol-fontsoracle-linux-upgrade-libreoffice-pdfimportoracle-linux-upgrade-libreoffice-postgresqloracle-linux-upgrade-libreoffice-pyunooracle-linux-upgrade-libreoffice-rhinooracle-linux-upgrade-libreoffice-sdkoracle-linux-upgrade-libreoffice-sdk-docoracle-linux-upgrade-libreoffice-ureoracle-linux-upgrade-libreoffice-wiki-publisheroracle-linux-upgrade-libreoffice-writeroracle-linux-upgrade-libreoffice-xsltfilter
Title
NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.