PT-2019-3159 · Document Foundation+5 · Libreoffice+5
Gabriel Masei
·
Publicado
2019-08-06
·
Atualizado
2024-06-15
·
CVE-2019-9851
CVSS v3.1
9.8
Crítica
| Vetor | AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Document Foundation LibreOffice versions prior to 6.2.6
Description
The issue is related to LibreLogo, a programmable turtle vector graphics script in LibreOffice, which can execute arbitrary python commands contained within the document it is launched from. Initially, protection was added to block calling LibreLogo from document event script handlers, such as mouse over, to address a previous issue. However, LibreOffice also has a feature where documents can specify that pre-installed scripts can be executed on various global script events, such as document-open. This feature was not properly validated, allowing potential exploitation. The vulnerability can be exploited by sending a specially crafted document, enabling a remote attacker to execute arbitrary code in the target system.
Recommendations
For versions prior to 6.2.6, update to version 6.2.6 or later to resolve the issue. As a temporary workaround, consider disabling the execution of global script event handlers until a patch is available. Restrict access to documents that may contain malicious scripts to minimize the risk of exploitation. Avoid using the feature that allows documents to specify the execution of pre-installed scripts on global script events until the issue is resolved.
Exploit
Correção
RCE
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Alt Linux
Centos
Libreoffice
Red Hat
Suse
Ubuntu