Описание
LibreOffice 4.2.4 executes unspecified VBA macros automatically, which has unspecified impact and attack vectors, possibly related to doc/docmacromode.cxx.
It was found that LibreOffice documents executed macros unconditionally, without user approval, when these documents were opened using LibreOffice. An attacker could use this flaw to execute arbitrary code as the user running LibreOffice by embedding malicious VBA scripts in the document as macros.
Затронутые пакеты
| Платформа | Пакет | Состояние | Рекомендация | Релиз |
|---|---|---|---|---|
| Red Hat Enterprise Linux 6 | libreoffice | Not affected | ||
| Red Hat Enterprise Linux 7 | libabw | Fixed | RHSA-2015:0377 | 05.03.2015 |
| Red Hat Enterprise Linux 7 | libcmis | Fixed | RHSA-2015:0377 | 05.03.2015 |
| Red Hat Enterprise Linux 7 | libetonyek | Fixed | RHSA-2015:0377 | 05.03.2015 |
| Red Hat Enterprise Linux 7 | libfreehand | Fixed | RHSA-2015:0377 | 05.03.2015 |
| Red Hat Enterprise Linux 7 | liblangtag | Fixed | RHSA-2015:0377 | 05.03.2015 |
| Red Hat Enterprise Linux 7 | libmwaw | Fixed | RHSA-2015:0377 | 05.03.2015 |
| Red Hat Enterprise Linux 7 | libodfgen | Fixed | RHSA-2015:0377 | 05.03.2015 |
| Red Hat Enterprise Linux 7 | libreoffice | Fixed | RHSA-2015:0377 | 05.03.2015 |
| Red Hat Enterprise Linux 7 | mdds | Fixed | RHSA-2015:0377 | 05.03.2015 |
Показывать по
Дополнительная информация
Статус:
EPSS
5.8 Medium
CVSS2
Связанные уязвимости
LibreOffice 4.2.4 executes unspecified VBA macros automatically, which has unspecified impact and attack vectors, possibly related to doc/docmacromode.cxx.
LibreOffice 4.2.4 executes unspecified VBA macros automatically, which has unspecified impact and attack vectors, possibly related to doc/docmacromode.cxx.
LibreOffice 4.2.4 executes unspecified VBA macros automatically, which ...
LibreOffice 4.2.4 executes unspecified VBA macros automatically, which has unspecified impact and attack vectors, possibly related to doc/docmacromode.cxx.
Уязвимость компонента doc/docmacromode.cxx пакета офисных программ LibreOffice, позволяющая нарушителю получить несанкционированный доступ к конфиденциальным данным, вызвать отказ в обслуживании или оказать воздействие на целостность данных
EPSS
5.8 Medium
CVSS2