DeutschShown in its original language — a full translation is planned for a future version.
Apache OpenOffice und LibreOffice: Mehrere Schwachstellen ermöglichen Codeausführung
view advisory published 2023-03-26
Ein lokaler oder entfernter, anonymer Angreifer kann mehrere Schwachstellen in Apache OpenOffice und LibreOffice ausnutzen, um beliebigen Programmcode auszuführen.
01
describes (2)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2022-47502US | high7.8 | — | ||
Apache OpenOffice documents can contain links that call internal macros with arbitrary arguments. Several URI Schemes are defined for this purpose.
Links can be activated by clic… | ||||
| CVE-2022-38745US | high7.8OT elevated | — | ||
Apache OpenOffice versions before 4.1.14 may be configured to add an empty entry to the Java class path. This may lead to run arbitrary Java code from the current directory.
| ||||
02
references
External citations — patches, advisories, analysis.
- Red Hat Security Advisory RHSA-2023:6508 vom 2023-11-07external
- Red Hat Security Advisory RHSA-2023:6933 vom 2023-11-15external
- Oracle Linux Security Advisory ELSA-2024-3304 vom 2024-05-24external
- Oracle Linux Security Advisory ELSA-2024-3835 vom 2024-06-12external
- Ubuntu Security Notice USN-6023-1 vom 2023-04-17external
- WID-SEC-W-2023-0760 - CSAF Versionself
- WID-SEC-2023-0760 - Portal Versionself
- LibreOffice Security Advisory CVE-2022-38745 vom 2023-03-24external
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan