REDHAT-BUG-1574998

First published: Fri May 04 2018(Updated: )

An information disclosure vulnerability occurs when LibreOffice 6.0.3 and Apache OpenOffice Writer 4.1.5 automatically process and initiate an SMB connection embedded in a malicious file, as demonstrated by xlink:href=file://192.168.0.2/test.jpg within an office:document-content element in a .odt XML document. References: <a href="http://secureyourit.co.uk/wp/2018/05/01/creating-malicious-odt-files/">http://secureyourit.co.uk/wp/2018/05/01/creating-malicious-odt-files/</a>

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Read MoreStart Free Trial

• agent/references
• agent/type
• agent/last-modified-date
• agent/first-publish-date
• collector/redhat-bugzilla
• source/Red Hat
• alias/CVE-2018-10583
• agent/source
• agent/severity
• agent/description
• agent/event
• agent/softwarecombine
• agent/tags
• agent/guess-ai
• agent/software-canonical-lookup
• agent/software-canonical-lookup-request
• vendor/the document foundation
• canonical/the document foundation libreoffice
• vendor/apache
• canonical/apache openoffice