REDHAT-BUG-1574998
First published: Fri May 04 2018(Updated: )
An information disclosure vulnerability occurs when LibreOffice 6.0.3 and Apache OpenOffice Writer 4.1.5 automatically process and initiate an SMB connection embedded in a malicious file, as demonstrated by xlink:href=file://192.168.0.2/test.jpg within an office:document-content element in a .odt XML document. References: <a href="http://secureyourit.co.uk/wp/2018/05/01/creating-malicious-odt-files/">http://secureyourit.co.uk/wp/2018/05/01/creating-malicious-odt-files/</a>
| Affected Software | Affected Version | How to fix |
|---|---|---|
| LibreOffice Draw | ||
| Apache OpenOffice |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of REDHAT-BUG-1574998?
The severity of REDHAT-BUG-1574998 is high due to the potential for information disclosure.
How do I fix REDHAT-BUG-1574998?
To fix REDHAT-BUG-1574998, update to the latest versions of LibreOffice and Apache OpenOffice that address this vulnerability.
What versions are affected by REDHAT-BUG-1574998?
REDHAT-BUG-1574998 affects LibreOffice 6.0.3 and Apache OpenOffice Writer 4.1.5.
What type of vulnerability is REDHAT-BUG-1574998?
REDHAT-BUG-1574998 is an information disclosure vulnerability.
What causes the vulnerability in REDHAT-BUG-1574998?
The vulnerability in REDHAT-BUG-1574998 is caused by the automatic processing of SMB connections embedded in malicious ODT files.
- agent/references
- agent/type
- agent/last-modified-date
- agent/first-publish-date
- collector/redhat-bugzilla
- source/Red Hat
- alias/CVE-2018-10583
- agent/source
- agent/severity
- agent/description
- agent/event
- agent/tags
- agent/softwarecombine
- agent/guess-ai
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- vendor/the document foundation
- canonical/libreoffice draw
- vendor/apache
- canonical/apache openoffice