DeutschShown in its original language — a full translation is planned for a future version.
LibreOffice: Mehrere Schwachstellen
view advisory published 2019-07-16
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in LibreOffice ausnutzen, um beliebigen Programmcode mit Benutzerrechten auszuführen oder Sicherheitsvorkehrungen zu umgehen.
01
describes (2)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2019-9849US | medium4.3 | Exploit | ||
LibreOffice has a 'stealth mode' in which only documents from locations deemed 'trusted' are allowed to retrieve remote resources. This mode is not the default mode, but can be ena… | ||||
| CVE-2019-9848US | critical9.8 | — | ||
LibreOffice has a feature where documents can specify that pre-installed scripts can be executed on various document events such as mouse-over, etc. LibreOffice is typically also b… | ||||
02
references
External citations — patches, advisories, analysis.
- Red Hat Security Advisory RHSA-2020:1151 vom 2020-03-31external
- Red Hat Security Advisory RHSA-2020:1598 vom 2020-04-28external
- Amazon Linux Security Advisory ALASLIBREOFFICE-2023-002 vom 2023-09-28external
- Arch Linux Security Advisory ASA-201907-7 vom 2019-07-23external
- Arch Linux Security Advisory ASA-201908-9 vom 2019-08-17external
- GENTOO Security Advisory GLSA201908-13 vom 2019-08-15external
- Ubuntu Security Notice USN-4063-1 vom 2019-07-18external
- WID-SEC-W-2023-2485 - CSAF Versionself
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan