CVE-2017-3157
Medium · 5.5CVSS
5.5
EPSS
3.1%
Published
Nov 20, 2017
CISA due date
—
Cloudanix analysis
An attacker can trick someone into opening a specially made document that secretly copies files from their computer and sends them back if the user saves and returns the file.
- Exploitation
- Requires User Interaction
- Attacker needs
- User Interaction
- Complexity
- Moderate
- Impact
- Data Exposure
- Component
- Application
- Class
- Information Disclosure
- Remediation
- Upgrade
- Effort
- Medium
- Patch risk
- Low
What it actually does
By exploiting how embedded objects are rendered, an attacker can craft a document that reads arbitrary files from the user's filesystem and stores the contents in hidden sections.
Why it matters to the business
Attackers may obtain sensitive files from user systems if they know exact file paths and successfully trick the user into opening, saving, and returning the document; no widespread ransomware or KEV exploitation observed.
How an attack unfolds
An attacker prepares a specially crafted document containing embedded objects, knows the target file path, tricks the user into opening the document so the render process leaks the file content into hidden sections, then convinces the user to save and send the document back.
How to fix it
Upgrade affected OpenOffice installations to version 4.1.4 or later. For listed Wireshark packages apply the referenced fixed versions such as 2.6.2-1 on Debian or 2.6.3-1~ubuntu* on Ubuntu.
How to confirm the fix worked
Confirm OpenOffice version is 4.1.4 or newer; verify Wireshark package versions match the listed fixed releases on each distribution.
Typical attack path
- Identify target file path on victim system
- Craft malicious document with embedded objects and hidden sections
- Deliver document to victim via email or other means
- Victim opens document triggering the render behavior
- Victim saves modified document containing stolen data
- Victim sends document back to attacker
How to detect it
Review document handling logs and user-reported incidents involving unexpected saved files; look for unusual document behavior involving embedded objects or hidden sections in forensic analysis of received documents.
What your security team should do
- Prioritize upgrade of OpenOffice to 4.1.4+ across all user endpoints
- Apply the specified Wireshark fixed package versions on Debian and Ubuntu systems
- Educate users on risks of opening unsolicited documents and returning saved files
- Monitor for any new exploit maturity indicators given stable low EPSS
The record
By exploiting the way Apache OpenOffice before 4.1.4 renders embedded objects, an attacker could craft a document that allows reading in a file from the user's filesystem. Information could be retrieved by the attacker by, e.g., using hidden sections to store the information, tricking the user into saving the document and convincing the user to send the document back to the attacker. The vulnerability is mitigated by the need for the attacker to know the precise file path in the target system, and the need to trick the user into saving the document and sending it back.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Debian:11 | libreoffice | 0 | 1:5.2.3-1 |
| Debian:12 | libreoffice | 0 | 1:5.2.3-1 |
| Debian:13 | libreoffice | 0 | 1:5.2.3-1 |
| Debian:7 | libreoffice | 0 | 1:3.5.4+dfsg2-0+deb7u9 |
| Debian:8 | libreoffice | 0 | 1:4.3.3-2+deb8u6 |
| Red Hat:enterprise_linux:6::client | autocorr-af | 0 | 1:4.3.7.2-2.el6_9.1 |
| Red Hat:enterprise_linux:6::client | autocorr-bg | 0 | 1:4.3.7.2-2.el6_9.1 |
| Red Hat:enterprise_linux:6::client | autocorr-ca | 0 | 1:4.3.7.2-2.el6_9.1 |
| Red Hat:enterprise_linux:6::client | autocorr-cs | 0 | 1:4.3.7.2-2.el6_9.1 |
| Red Hat:enterprise_linux:6::client | autocorr-da | 0 | 1:4.3.7.2-2.el6_9.1 |
| Red Hat:enterprise_linux:6::client | autocorr-de | 0 | 1:4.3.7.2-2.el6_9.1 |
| Red Hat:enterprise_linux:6::client | autocorr-en | 0 | 1:4.3.7.2-2.el6_9.1 |
| Red Hat:enterprise_linux:6::client | autocorr-es | 0 | 1:4.3.7.2-2.el6_9.1 |
| Red Hat:enterprise_linux:6::client | autocorr-fa | 0 | 1:4.3.7.2-2.el6_9.1 |
| Red Hat:enterprise_linux:6::client | autocorr-fi | 0 | 1:4.3.7.2-2.el6_9.1 |
| Red Hat:enterprise_linux:6::client | autocorr-fr | 0 | 1:4.3.7.2-2.el6_9.1 |
| Red Hat:enterprise_linux:6::client | autocorr-ga | 0 | 1:4.3.7.2-2.el6_9.1 |
| Red Hat:enterprise_linux:6::client | autocorr-hr | 0 | 1:4.3.7.2-2.el6_9.1 |
| Red Hat:enterprise_linux:6::client | autocorr-hu | 0 | 1:4.3.7.2-2.el6_9.1 |
| Red Hat:enterprise_linux:6::client | autocorr-is | 0 | 1:4.3.7.2-2.el6_9.1 |
| Red Hat:enterprise_linux:6::client | autocorr-it | 0 | 1:4.3.7.2-2.el6_9.1 |
| Red Hat:enterprise_linux:6::client | autocorr-ja | 0 | 1:4.3.7.2-2.el6_9.1 |
| Red Hat:enterprise_linux:6::client | autocorr-ko | 0 | 1:4.3.7.2-2.el6_9.1 |
| Red Hat:enterprise_linux:6::client | autocorr-lb | 0 | 1:4.3.7.2-2.el6_9.1 |
| Red Hat:enterprise_linux:6::client | autocorr-lt | 0 | 1:4.3.7.2-2.el6_9.1 |
| Red Hat:enterprise_linux:6::client | autocorr-mn | 0 | 1:4.3.7.2-2.el6_9.1 |
| Red Hat:enterprise_linux:6::client | autocorr-nl | 0 | 1:4.3.7.2-2.el6_9.1 |
| Red Hat:enterprise_linux:6::client | autocorr-pl | 0 | 1:4.3.7.2-2.el6_9.1 |
| Red Hat:enterprise_linux:6::client | autocorr-pt | 0 | 1:4.3.7.2-2.el6_9.1 |
| Red Hat:enterprise_linux:6::client | autocorr-ro | 0 | 1:4.3.7.2-2.el6_9.1 |
| Red Hat:enterprise_linux:6::client | autocorr-ru | 0 | 1:4.3.7.2-2.el6_9.1 |
| Red Hat:enterprise_linux:6::client | autocorr-sk | 0 | 1:4.3.7.2-2.el6_9.1 |
| Red Hat:enterprise_linux:6::client | autocorr-sl | 0 | 1:4.3.7.2-2.el6_9.1 |
| Red Hat:enterprise_linux:6::client | autocorr-sr | 0 | 1:4.3.7.2-2.el6_9.1 |
| Red Hat:enterprise_linux:6::client | autocorr-sv | 0 | 1:4.3.7.2-2.el6_9.1 |
| Red Hat:enterprise_linux:6::client | autocorr-tr | 0 | 1:4.3.7.2-2.el6_9.1 |
| Red Hat:enterprise_linux:6::client | autocorr-vi | 0 | 1:4.3.7.2-2.el6_9.1 |
| Red Hat:enterprise_linux:6::client | autocorr-zh | 0 | 1:4.3.7.2-2.el6_9.1 |
| Red Hat:enterprise_linux:6::client | libreoffice | 0 | 1:4.3.7.2-2.el6_9.1 |
| Red Hat:enterprise_linux:6::client | libreoffice-base | 0 | 1:4.3.7.2-2.el6_9.1 |
| Red Hat:enterprise_linux:6::client | libreoffice-bsh | 0 | 1:4.3.7.2-2.el6_9.1 |
| Red Hat:enterprise_linux:6::client | libreoffice-calc | 0 | 1:4.3.7.2-2.el6_9.1 |
| Red Hat:enterprise_linux:6::client | libreoffice-core | 0 | 1:4.3.7.2-2.el6_9.1 |
| Red Hat:enterprise_linux:6::client | libreoffice-debuginfo | 0 | 1:4.3.7.2-2.el6_9.1 |
| Red Hat:enterprise_linux:6::client | libreoffice-draw | 0 | 1:4.3.7.2-2.el6_9.1 |
| Red Hat:enterprise_linux:6::client | libreoffice-emailmerge | 0 | 1:4.3.7.2-2.el6_9.1 |
| Red Hat:enterprise_linux:6::client | libreoffice-filters | 0 | 1:4.3.7.2-2.el6_9.1 |
| Red Hat:enterprise_linux:6::client | libreoffice-gdb-debug-support | 0 | 1:4.3.7.2-2.el6_9.1 |
| Red Hat:enterprise_linux:6::client | libreoffice-glade | 0 | 1:4.3.7.2-2.el6_9.1 |
| Red Hat:enterprise_linux:6::client | libreoffice-graphicfilter | 0 | 1:4.3.7.2-2.el6_9.1 |
| Red Hat:enterprise_linux:6::client | libreoffice-headless | 0 | 1:4.3.7.2-2.el6_9.1 |
| Red Hat:enterprise_linux:6::client | libreoffice-impress | 0 | 1:4.3.7.2-2.el6_9.1 |
| Red Hat:enterprise_linux:6::client | libreoffice-langpack-af | 0 | 1:4.3.7.2-2.el6_9.1 |
| Red Hat:enterprise_linux:6::client | libreoffice-langpack-ar | 0 | 1:4.3.7.2-2.el6_9.1 |
| Red Hat:enterprise_linux:6::client | libreoffice-langpack-as | 0 | 1:4.3.7.2-2.el6_9.1 |
| Red Hat:enterprise_linux:6::client | libreoffice-langpack-bg | 0 | 1:4.3.7.2-2.el6_9.1 |
| Red Hat:enterprise_linux:6::client | libreoffice-langpack-bn | 0 | 1:4.3.7.2-2.el6_9.1 |
| Red Hat:enterprise_linux:6::client | libreoffice-langpack-ca | 0 | 1:4.3.7.2-2.el6_9.1 |
| Red Hat:enterprise_linux:6::client | libreoffice-langpack-cs | 0 | 1:4.3.7.2-2.el6_9.1 |
| Red Hat:enterprise_linux:6::client | libreoffice-langpack-cy | 0 | 1:4.3.7.2-2.el6_9.1 |
| Red Hat:enterprise_linux:6::client | libreoffice-langpack-da | 0 | 1:4.3.7.2-2.el6_9.1 |
| Red Hat:enterprise_linux:6::client | libreoffice-langpack-de | 0 | 1:4.3.7.2-2.el6_9.1 |
| Red Hat:enterprise_linux:6::client | libreoffice-langpack-dz | 0 | 1:4.3.7.2-2.el6_9.1 |
| Red Hat:enterprise_linux:6::client | libreoffice-langpack-el | 0 | 1:4.3.7.2-2.el6_9.1 |
| Red Hat:enterprise_linux:6::client | libreoffice-langpack-en | 0 | 1:4.3.7.2-2.el6_9.1 |
| Red Hat:enterprise_linux:6::client | libreoffice-langpack-es | 0 | 1:4.3.7.2-2.el6_9.1 |
| Red Hat:enterprise_linux:6::client | libreoffice-langpack-et | 0 | 1:4.3.7.2-2.el6_9.1 |
| Red Hat:enterprise_linux:6::client | libreoffice-langpack-eu | 0 | 1:4.3.7.2-2.el6_9.1 |
| Red Hat:enterprise_linux:6::client | libreoffice-langpack-fi | 0 | 1:4.3.7.2-2.el6_9.1 |
| Red Hat:enterprise_linux:6::client | libreoffice-langpack-fr | 0 | 1:4.3.7.2-2.el6_9.1 |
| Red Hat:enterprise_linux:6::client | libreoffice-langpack-ga | 0 | 1:4.3.7.2-2.el6_9.1 |
| Red Hat:enterprise_linux:6::client | libreoffice-langpack-gl | 0 | 1:4.3.7.2-2.el6_9.1 |
| Red Hat:enterprise_linux:6::client | libreoffice-langpack-gu | 0 | 1:4.3.7.2-2.el6_9.1 |
| Red Hat:enterprise_linux:6::client | libreoffice-langpack-he | 0 | 1:4.3.7.2-2.el6_9.1 |
| Red Hat:enterprise_linux:6::client | libreoffice-langpack-hi | 0 | 1:4.3.7.2-2.el6_9.1 |
| Red Hat:enterprise_linux:6::client | libreoffice-langpack-hr | 0 | 1:4.3.7.2-2.el6_9.1 |
| Red Hat:enterprise_linux:6::client | libreoffice-langpack-hu | 0 | 1:4.3.7.2-2.el6_9.1 |
| Red Hat:enterprise_linux:6::client | libreoffice-langpack-it | 0 | 1:4.3.7.2-2.el6_9.1 |
| Red Hat:enterprise_linux:6::client | libreoffice-langpack-ja | 0 | 1:4.3.7.2-2.el6_9.1 |
| Red Hat:enterprise_linux:6::client | libreoffice-langpack-kn | 0 | 1:4.3.7.2-2.el6_9.1 |
| Red Hat:enterprise_linux:6::client | libreoffice-langpack-ko | 0 | 1:4.3.7.2-2.el6_9.1 |
| Red Hat:enterprise_linux:6::client | libreoffice-langpack-lt | 0 | 1:4.3.7.2-2.el6_9.1 |
| Red Hat:enterprise_linux:6::client | libreoffice-langpack-mai | 0 | 1:4.3.7.2-2.el6_9.1 |
| Red Hat:enterprise_linux:6::client | libreoffice-langpack-ml | 0 | 1:4.3.7.2-2.el6_9.1 |
| Red Hat:enterprise_linux:6::client | libreoffice-langpack-mr | 0 | 1:4.3.7.2-2.el6_9.1 |
| Red Hat:enterprise_linux:6::client | libreoffice-langpack-ms | 0 | 1:4.3.7.2-2.el6_9.1 |
| Red Hat:enterprise_linux:6::client | libreoffice-langpack-nb | 0 | 1:4.3.7.2-2.el6_9.1 |
| Red Hat:enterprise_linux:6::client | libreoffice-langpack-nl | 0 | 1:4.3.7.2-2.el6_9.1 |
| Red Hat:enterprise_linux:6::client | libreoffice-langpack-nn | 0 | 1:4.3.7.2-2.el6_9.1 |
| Red Hat:enterprise_linux:6::client | libreoffice-langpack-nr | 0 | 1:4.3.7.2-2.el6_9.1 |
| Red Hat:enterprise_linux:6::client | libreoffice-langpack-nso | 0 | 1:4.3.7.2-2.el6_9.1 |
| Red Hat:enterprise_linux:6::client | libreoffice-langpack-or | 0 | 1:4.3.7.2-2.el6_9.1 |
| Red Hat:enterprise_linux:6::client | libreoffice-langpack-pa | 0 | 1:4.3.7.2-2.el6_9.1 |
| Red Hat:enterprise_linux:6::client | libreoffice-langpack-pl | 0 | 1:4.3.7.2-2.el6_9.1 |
| Red Hat:enterprise_linux:6::client | libreoffice-langpack-pt-BR | 0 | 1:4.3.7.2-2.el6_9.1 |
| Red Hat:enterprise_linux:6::client | libreoffice-langpack-pt-PT | 0 | 1:4.3.7.2-2.el6_9.1 |
| Red Hat:enterprise_linux:6::client | libreoffice-langpack-ro | 0 | 1:4.3.7.2-2.el6_9.1 |
| Red Hat:enterprise_linux:6::client | libreoffice-langpack-ru | 0 | 1:4.3.7.2-2.el6_9.1 |
| Red Hat:enterprise_linux:6::client | libreoffice-langpack-sk | 0 | 1:4.3.7.2-2.el6_9.1 |
| Red Hat:enterprise_linux:6::client | libreoffice-langpack-sl | 0 | 1:4.3.7.2-2.el6_9.1 |
| Red Hat:enterprise_linux:6::client | libreoffice-langpack-sr | 0 | 1:4.3.7.2-2.el6_9.1 |
| Red Hat:enterprise_linux:6::client | libreoffice-langpack-ss | 0 | 1:4.3.7.2-2.el6_9.1 |
| Red Hat:enterprise_linux:6::client | libreoffice-langpack-st | 0 | 1:4.3.7.2-2.el6_9.1 |
| Red Hat:enterprise_linux:6::client | libreoffice-langpack-sv | 0 | 1:4.3.7.2-2.el6_9.1 |
| Red Hat:enterprise_linux:6::client | libreoffice-langpack-ta | 0 | 1:4.3.7.2-2.el6_9.1 |
| Red Hat:enterprise_linux:6::client | libreoffice-langpack-te | 0 | 1:4.3.7.2-2.el6_9.1 |
| Red Hat:enterprise_linux:6::client | libreoffice-langpack-th | 0 | 1:4.3.7.2-2.el6_9.1 |
| Red Hat:enterprise_linux:6::client | libreoffice-langpack-tn | 0 | 1:4.3.7.2-2.el6_9.1 |
| Red Hat:enterprise_linux:6::client | libreoffice-langpack-tr | 0 | 1:4.3.7.2-2.el6_9.1 |
| Red Hat:enterprise_linux:6::client | libreoffice-langpack-ts | 0 | 1:4.3.7.2-2.el6_9.1 |
| Red Hat:enterprise_linux:6::client | libreoffice-langpack-uk | 0 | 1:4.3.7.2-2.el6_9.1 |
| Red Hat:enterprise_linux:6::client | libreoffice-langpack-ur | 0 | 1:4.3.7.2-2.el6_9.1 |
| Red Hat:enterprise_linux:6::client | libreoffice-langpack-ve | 0 | 1:4.3.7.2-2.el6_9.1 |
| Red Hat:enterprise_linux:6::client | libreoffice-langpack-xh | 0 | 1:4.3.7.2-2.el6_9.1 |
| Red Hat:enterprise_linux:6::client | libreoffice-langpack-zh-Hans | 0 | 1:4.3.7.2-2.el6_9.1 |
| Red Hat:enterprise_linux:6::client | libreoffice-langpack-zh-Hant | 0 | 1:4.3.7.2-2.el6_9.1 |
| Red Hat:enterprise_linux:6::client | libreoffice-langpack-zu | 0 | 1:4.3.7.2-2.el6_9.1 |
| Red Hat:enterprise_linux:6::client | libreoffice-librelogo | 0 | 1:4.3.7.2-2.el6_9.1 |
| Red Hat:enterprise_linux:6::client | libreoffice-math | 0 | 1:4.3.7.2-2.el6_9.1 |
| Red Hat:enterprise_linux:6::client | libreoffice-nlpsolver | 0 | 1:4.3.7.2-2.el6_9.1 |
| Red Hat:enterprise_linux:6::client | libreoffice-officebean | 0 | 1:4.3.7.2-2.el6_9.1 |
| Red Hat:enterprise_linux:6::client | libreoffice-ogltrans | 0 | 1:4.3.7.2-2.el6_9.1 |
| Red Hat:enterprise_linux:6::client | libreoffice-opensymbol-fonts | 0 | 1:4.3.7.2-2.el6_9.1 |
| Red Hat:enterprise_linux:6::client | libreoffice-pdfimport | 0 | 1:4.3.7.2-2.el6_9.1 |
| Red Hat:enterprise_linux:6::client | libreoffice-pyuno | 0 | 1:4.3.7.2-2.el6_9.1 |
| Red Hat:enterprise_linux:6::client | libreoffice-rhino | 0 | 1:4.3.7.2-2.el6_9.1 |
| Red Hat:enterprise_linux:6::client | libreoffice-sdk | 0 | 1:4.3.7.2-2.el6_9.1 |
| Red Hat:enterprise_linux:6::client | libreoffice-sdk-doc | 0 | 1:4.3.7.2-2.el6_9.1 |
| Red Hat:enterprise_linux:6::client | libreoffice-ure | 0 | 1:4.3.7.2-2.el6_9.1 |
| Red Hat:enterprise_linux:6::client | libreoffice-wiki-publisher | 0 | 1:4.3.7.2-2.el6_9.1 |
| Red Hat:enterprise_linux:6::client | libreoffice-writer | 0 | 1:4.3.7.2-2.el6_9.1 |
| Red Hat:enterprise_linux:6::client | libreoffice-xsltfilter | 0 | 1:4.3.7.2-2.el6_9.1 |
| Red Hat:enterprise_linux:6::server | autocorr-af | 0 | 1:4.3.7.2-2.el6_9.1 |
| Red Hat:enterprise_linux:6::server | autocorr-bg | 0 | 1:4.3.7.2-2.el6_9.1 |
| Red Hat:enterprise_linux:6::server | autocorr-ca | 0 | 1:4.3.7.2-2.el6_9.1 |
| Red Hat:enterprise_linux:6::server | autocorr-cs | 0 | 1:4.3.7.2-2.el6_9.1 |
| Red Hat:enterprise_linux:6::server | autocorr-da | 0 | 1:4.3.7.2-2.el6_9.1 |
| Red Hat:enterprise_linux:6::server | autocorr-de | 0 | 1:4.3.7.2-2.el6_9.1 |
| Red Hat:enterprise_linux:6::server | autocorr-en | 0 | 1:4.3.7.2-2.el6_9.1 |
| Red Hat:enterprise_linux:6::server | autocorr-es | 0 | 1:4.3.7.2-2.el6_9.1 |
| Red Hat:enterprise_linux:6::server | autocorr-fa | 0 | 1:4.3.7.2-2.el6_9.1 |
| Red Hat:enterprise_linux:6::server | autocorr-fi | 0 | 1:4.3.7.2-2.el6_9.1 |
| Red Hat:enterprise_linux:6::server | autocorr-fr | 0 | 1:4.3.7.2-2.el6_9.1 |
| Red Hat:enterprise_linux:6::server | autocorr-ga | 0 | 1:4.3.7.2-2.el6_9.1 |
| Red Hat:enterprise_linux:6::server | autocorr-hr | 0 | 1:4.3.7.2-2.el6_9.1 |
| Red Hat:enterprise_linux:6::server | autocorr-hu | 0 | 1:4.3.7.2-2.el6_9.1 |
| Red Hat:enterprise_linux:6::server | autocorr-is | 0 | 1:4.3.7.2-2.el6_9.1 |
| Red Hat:enterprise_linux:6::server | autocorr-it | 0 | 1:4.3.7.2-2.el6_9.1 |
| Red Hat:enterprise_linux:6::server | autocorr-ja | 0 | 1:4.3.7.2-2.el6_9.1 |
| Red Hat:enterprise_linux:6::server | autocorr-ko | 0 | 1:4.3.7.2-2.el6_9.1 |
| Red Hat:enterprise_linux:6::server | autocorr-lb | 0 | 1:4.3.7.2-2.el6_9.1 |
| Red Hat:enterprise_linux:6::server | autocorr-lt | 0 | 1:4.3.7.2-2.el6_9.1 |
| Red Hat:enterprise_linux:6::server | autocorr-mn | 0 | 1:4.3.7.2-2.el6_9.1 |
| Red Hat:enterprise_linux:6::server | autocorr-nl | 0 | 1:4.3.7.2-2.el6_9.1 |
| Red Hat:enterprise_linux:6::server | autocorr-pl | 0 | 1:4.3.7.2-2.el6_9.1 |
| Red Hat:enterprise_linux:6::server | autocorr-pt | 0 | 1:4.3.7.2-2.el6_9.1 |
| Red Hat:enterprise_linux:6::server | autocorr-ro | 0 | 1:4.3.7.2-2.el6_9.1 |
| Red Hat:enterprise_linux:6::server | autocorr-ru | 0 | 1:4.3.7.2-2.el6_9.1 |
| Red Hat:enterprise_linux:6::server | autocorr-sk | 0 | 1:4.3.7.2-2.el6_9.1 |
| Red Hat:enterprise_linux:6::server | autocorr-sl | 0 | 1:4.3.7.2-2.el6_9.1 |
| Red Hat:enterprise_linux:6::server | autocorr-sr | 0 | 1:4.3.7.2-2.el6_9.1 |
| Red Hat:enterprise_linux:6::server | autocorr-sv | 0 | 1:4.3.7.2-2.el6_9.1 |
| Red Hat:enterprise_linux:6::server | autocorr-tr | 0 | 1:4.3.7.2-2.el6_9.1 |
| Red Hat:enterprise_linux:6::server | autocorr-vi | 0 | 1:4.3.7.2-2.el6_9.1 |
| Red Hat:enterprise_linux:6::server | autocorr-zh | 0 | 1:4.3.7.2-2.el6_9.1 |
| Red Hat:enterprise_linux:6::server | libreoffice | 0 | 1:4.3.7.2-2.el6_9.1 |
| Red Hat:enterprise_linux:6::server | libreoffice-base | 0 | 1:4.3.7.2-2.el6_9.1 |
| Red Hat:enterprise_linux:6::server | libreoffice-bsh | 0 | 1:4.3.7.2-2.el6_9.1 |
| Red Hat:enterprise_linux:6::server | libreoffice-calc | 0 | 1:4.3.7.2-2.el6_9.1 |
| Red Hat:enterprise_linux:6::server | libreoffice-core | 0 | 1:4.3.7.2-2.el6_9.1 |
| Red Hat:enterprise_linux:6::server | libreoffice-debuginfo | 0 | 1:4.3.7.2-2.el6_9.1 |
| Red Hat:enterprise_linux:6::server | libreoffice-draw | 0 | 1:4.3.7.2-2.el6_9.1 |
| Red Hat:enterprise_linux:6::server | libreoffice-emailmerge | 0 | 1:4.3.7.2-2.el6_9.1 |
| Red Hat:enterprise_linux:6::server | libreoffice-filters | 0 | 1:4.3.7.2-2.el6_9.1 |
| Red Hat:enterprise_linux:6::server | libreoffice-gdb-debug-support | 0 | 1:4.3.7.2-2.el6_9.1 |
| Red Hat:enterprise_linux:6::server | libreoffice-glade | 0 | 1:4.3.7.2-2.el6_9.1 |
| Red Hat:enterprise_linux:6::server | libreoffice-graphicfilter | 0 | 1:4.3.7.2-2.el6_9.1 |
| Red Hat:enterprise_linux:6::server | libreoffice-headless | 0 | 1:4.3.7.2-2.el6_9.1 |
| Red Hat:enterprise_linux:6::server | libreoffice-impress | 0 | 1:4.3.7.2-2.el6_9.1 |
| Red Hat:enterprise_linux:6::server | libreoffice-langpack-af | 0 | 1:4.3.7.2-2.el6_9.1 |
| Red Hat:enterprise_linux:6::server | libreoffice-langpack-ar | 0 | 1:4.3.7.2-2.el6_9.1 |
| Red Hat:enterprise_linux:6::server | libreoffice-langpack-as | 0 | 1:4.3.7.2-2.el6_9.1 |
| Red Hat:enterprise_linux:6::server | libreoffice-langpack-bg | 0 | 1:4.3.7.2-2.el6_9.1 |
| Red Hat:enterprise_linux:6::server | libreoffice-langpack-bn | 0 | 1:4.3.7.2-2.el6_9.1 |
| Red Hat:enterprise_linux:6::server | libreoffice-langpack-ca | 0 | 1:4.3.7.2-2.el6_9.1 |
| Red Hat:enterprise_linux:6::server | libreoffice-langpack-cs | 0 | 1:4.3.7.2-2.el6_9.1 |
| Red Hat:enterprise_linux:6::server | libreoffice-langpack-cy | 0 | 1:4.3.7.2-2.el6_9.1 |
| Red Hat:enterprise_linux:6::server | libreoffice-langpack-da | 0 | 1:4.3.7.2-2.el6_9.1 |
| Red Hat:enterprise_linux:6::server | libreoffice-langpack-de | 0 | 1:4.3.7.2-2.el6_9.1 |
| Red Hat:enterprise_linux:6::server | libreoffice-langpack-dz | 0 | 1:4.3.7.2-2.el6_9.1 |
| Red Hat:enterprise_linux:6::server | libreoffice-langpack-el | 0 | 1:4.3.7.2-2.el6_9.1 |
| Red Hat:enterprise_linux:6::server | libreoffice-langpack-en | 0 | 1:4.3.7.2-2.el6_9.1 |
| Red Hat:enterprise_linux:6::server | libreoffice-langpack-es | 0 | 1:4.3.7.2-2.el6_9.1 |
| Red Hat:enterprise_linux:6::server | libreoffice-langpack-et | 0 | 1:4.3.7.2-2.el6_9.1 |
| Red Hat:enterprise_linux:6::server | libreoffice-langpack-eu | 0 | 1:4.3.7.2-2.el6_9.1 |
| Red Hat:enterprise_linux:6::server | libreoffice-langpack-fi | 0 | 1:4.3.7.2-2.el6_9.1 |
| Red Hat:enterprise_linux:6::server | libreoffice-langpack-fr | 0 | 1:4.3.7.2-2.el6_9.1 |
| Red Hat:enterprise_linux:6::server | libreoffice-langpack-ga | 0 | 1:4.3.7.2-2.el6_9.1 |
| Red Hat:enterprise_linux:6::server | libreoffice-langpack-gl | 0 | 1:4.3.7.2-2.el6_9.1 |
| Red Hat:enterprise_linux:6::server | libreoffice-langpack-gu | 0 | 1:4.3.7.2-2.el6_9.1 |
Related vulnerabilities
- CVE-2024-12426 Exposure of Environmental Variables and arbitrary INI file values to an Unauthorized… Also affects libreoffice
- CVE-2024-12425 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')… Also affects libreoffice
- CVE-2024-7788 Improper Digital Signature Invalidation vulnerability in Zip Repair Mode of The Document… Also affects libreoffice
- CVE-2021-25636 LibreOffice supports digital signatures of ODF documents and macros within documents… Also affects libreoffice
- CVE-2021-25633 LibreOffice supports digital signatures of ODF documents and macros within documents… Also affects libreoffice
- CVE-2017-12607 A vulnerability in OpenOffice's PPT file parser before 4.1.4, and specifically in… Also affects libreoffice
- CVE-2016-10327 LibreOffice before 2016-12-22 has an out-of-bounds write caused by a heap-based buffer… Also affects libreoffice
- CVE-2016-4324 Use-after-free vulnerability in LibreOffice before 5.1.4 allows remote attackers to… Also affects libreoffice