Summary
Ben Hayak discovered that it was possible to make LibreOffice Calc and Writer
disclose arbitrary files to an attacker if a user opened a specially crafted
file with embedded links.
Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 14.04 LTS 14.04:LTS | libreoffice | 1:4.2.8-0ubuntu5 |
| Ubuntu · 16.04 LTS 16.04:LTS | libreoffice | 1:5.1.6~rc2-0ubuntu1~xenial1 |
Vulnerabilities 1
-
Unscored —
By exploiting the way Apache OpenOffice before 4.1.4 renders embedded objects, an attacker could craft a document that …
References
-
report
https://ubuntu.com/security/CVE-2017-3157