PT-2018-2472 · Document Foundation+4 · Libreoffice+4

Publicado 2018-02-22 · Atualizado 2024-06-15 · CVE-2018-10119

Positive Technologies (AI Summary)

CVSS v3.1

7.8

Alta

Vetor base

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions LibreOffice versions prior to 5.4.5.1 LibreOffice versions 6.x prior to 6.0.1.1

Description The issue is related to the use of an incorrect integer data type in the StgSmallStrm class, which can lead to a denial of service or possibly other impacts via a crafted document using the structured storage ole2 wrapper file format. This is also associated with a use-after-free vulnerability in the SwCTBWrapper::Read function, allowing remote attackers to cause a denial of service with a specially formed file.

Recommendations For LibreOffice versions prior to 5.4.5.1, update to version 5.4.5.1 or later. For LibreOffice versions 6.x prior to 6.0.1.1, update to version 6.0.1.1 or later.

Exploit

Correção

DoS

Use After Free

Enumeração de Fraquezas

CWE-416

Identificadores relacionados

ALT-PU-2018-1273

BDU:2019-00715

CVE-2018-10119

DLA-1356-1

DSA-4178-1

MGASA-2018-0271

OPENSUSE-SU-2018_1311-1

OPENSUSE-SU-2024:10983-1

RHSA-2018:3054

RHSA-2018_3054

SUSE-SU-2018:1296-1

SUSE-SU-2018_1296-1

USN-3883-1

Produtos afetados

Alt Linux

Libreoffice

Red Hat

Suse

Ubuntu

Referências · 101

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/fileformat/libreoffice_macro_exec.rb · Exploit
• 🔥 https://github.com/TaharAmine/CVE-2018-10583 · Exploit
• 🔥 https://github.com/MrTaherAmine/CVE-2018-10583 · Exploit
• 🔥 https://github.com/4nimanegra/libreofficeExploit1 · Exploit
• https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/fileformat/odt_badodt.rb · Nota
• https://github.com/jollheef/libreoffice-remote-arbitrary-file-disclosure · Nota
• https://bdu.fstec.ru/vul/2019-00786 · Nota de Segurança
• https://suse.com/security/cve/CVE-2018-10583 · Nota
• https://libreoffice.org/about-us/security/advisories/cve-2018-10120 · Nota
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-10119 · Nota de Segurança
• https://ubuntu.com/security/CVE-2018-11790 · Aviso do Fabricante
• https://suse.com/security/cve/CVE-2006-2199 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2018-10119 · Nota de Segurança
• https://access.redhat.com/errata/RHSA-2018:3054 · Aviso do Fabricante
• https://cve.org/CVERecord?id=CVE-2018-10119 · Nota de Segurança