REDHAT-BUG-1574998: Medium severity libreoffice draw vulnerability
An information disclosure vulnerability occurs when LibreOffice 6.0.3 and Apache OpenOffice Writer 4.1.5 automatically process and initiate an SMB connection embedded in a malicious file, as demonstrated by xlink:href=file://192.168.0.2/test.jpg within an office:document-content element in a .odt XML document.
References:
http://secureyourit.co.uk/wp/2018/05/01/creating-malicious-odt-files/
Affected Software
Event History
Frequently Asked Questions
What is the severity of REDHAT-BUG-1574998?
The severity of REDHAT-BUG-1574998 is high due to the potential for information disclosure.
How do I fix REDHAT-BUG-1574998?
To fix REDHAT-BUG-1574998, update to the latest versions of LibreOffice and Apache OpenOffice that address this vulnerability.
What versions are affected by REDHAT-BUG-1574998?
REDHAT-BUG-1574998 affects LibreOffice 6.0.3 and Apache OpenOffice Writer 4.1.5.
What type of vulnerability is REDHAT-BUG-1574998?
REDHAT-BUG-1574998 is an information disclosure vulnerability.
What causes the vulnerability in REDHAT-BUG-1574998?
The vulnerability in REDHAT-BUG-1574998 is caused by the automatic processing of SMB connections embedded in malicious ODT files.