Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact
7.5
CVSSv3

CVE-2018-10583

Published: 01/05/2018 Updated: 07/11/2023
CVSS v2 Base Score: 5 | Impact Score: 2.9 | Exploitability Score: 10
CVSS v3 Base Score: 7.5 | Impact Score: 3.6 | Exploitability Score: 3.9
VMScore: 505
Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Subscribe to Libreoffice

Vulnerability Summary

An information disclosure vulnerability occurs when LibreOffice 6.0.3 and Apache OpenOffice Writer 4.1.5 automatically process and initiate an SMB connection embedded in a malicious file, as demonstrated by xlink:href=file://192.168.0.2/test.jpg within an office:document-content element in a .odt XML document.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

libreoffice libreoffice 6.0.3

apache openoffice 4.1.5

debian debian linux 8.0

debian debian linux 7.0

debian debian linux 9.0

redhat enterprise linux desktop 7.0

redhat enterprise linux workstation 7.0

redhat enterprise linux server 7.0

canonical ubuntu linux 16.04

canonical ubuntu linux 14.04

Vendor Advisories

Red Hat: Moderate: libreoffice security and bug fix update
Synopsis Moderate: libreoffice security and bug fix update Type/Severity Security Advisory: Moderate Topic An update for libreoffice is now available for Red Hat Enterprise Linux 7Red Hat Product Security has rated this update as having a security impact of Moderate A Common Vulnerability Scoring System ( ...
Ubuntu Security Notice: libreoffice vulnerabilities
Several security issues were fixed in LibreOffice ...
Red Hat: CVE-2018-10583
An information disclosure vulnerability occurs when LibreOffice 603 and Apache OpenOffice Writer 415 automatically process and initiate an SMB connection embedded in a malicious file, as demonstrated by xlink:href=file://19216802/testjpg within an office:document-content element in a odt XML document ...

Exploits

Exploit DB: LibreOffice/Open Office - '.odt' Information Disclosure
#! /usr/bin/python # Exploit Title: Malicious ODF File Creator # Date: 1st May 2018 # Exploit Author: Richard Davy # Vendor Homepage: wwwlibreofficeorg/ # Software Link: wwwlibreofficeorg/ # Version: LibreOffice 603, OpenOffice 415 # Tested on: Windows 10 # #Quick script/POC code to create a malicious ODF which can be used ...
Exploit DB: BigBlueButton 2.2.25 File Disclosure / Server-Side Request Forgery
RedTeam Pentesting discovered a vulnerability in the BigBlueButton web conferencing system version 2225 that allows participants of a conference with permissions to upload presentations to read arbitrary files from the file system and perform server-side requests This leads to administrative access to the BigBlueButton instance ...

Mailing Lists

Full Disclosure: [RT-SA-2020-005] Arbitrary File Disclosure and Server-Side Request Forgery in BigBlueButton
<!--X-Body-Begin--> <!--X-User-Header--> Full Disclosure mailing list archives <!--X-User-Header-End--> <!--X-TopPNI--> By Date By Thread </form> <!--X-TopPNI-End--> <!--X-MsgBody--> <!--X-Subject-Header-Begin--> [RT-SA-2020-005] Arbitrary File Disclosure and Server-Side Request Forgery in BigBlueButton <!--X-Subject-Header-End-- ...

Github Repositories

https://github.com/TaharAmine/CVE-2018-10583

An information disclosure vulnerability occurs when LibreOffice 6.0.3 and Apache OpenOffice Writer 4.1.5 automatically process and initiate an SMB connection embedded in a malicious file, as demonstrated by "xlink:href=file://192.168.0.2/test.jpg" within an "office:document-content" element in a ".odt XML document".

CVE-2018-10583 An information disclosure vulnerability occurs when LibreOffice 603 and Apache OpenOffice Writer 415 automatically process and initiate an SMB connection embedded in a malicious file, as demonstrated by "xlink:href=file://19216802/testjpg" within an "office:document-content" element in a "odt XML document" bitly/2w9

References

CWE-200http://secureyourit.co.uk/wp/2018/05/01/creating-malicious-odt-files/https://security-tracker.debian.org/tracker/CVE-2018-10583https://www.exploit-db.com/exploits/44564/https://access.redhat.com/errata/RHSA-2018:3054https://usn.ubuntu.com/3883-1/http://seclists.org/fulldisclosure/2020/Oct/26https://lists.apache.org/thread.html/6c65f22306c36c95e75f8d2b7f49cfcbeb0a4614245c20934612a39d%40%3Cdev.openoffice.apache.org%3Ehttps://lists.apache.org/thread.html/0598708912978b27121b2e380b44a225c706aca882cd1da6a955a0af%40%3Cdev.openoffice.apache.org%3Ehttps://lists.apache.org/thread.html/c8fd59ac77b42aac90eb5c59b87f3ab59b5e0c3bfb4819aa649a2909%40%3Cdev.openoffice.apache.org%3Ehttps://access.redhat.com/errata/RHSA-2018:3054https://usn.ubuntu.com/3883-1/https://nvd.nist.govhttps://www.exploit-db.com/exploits/44564/
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-22460CVE-2024-4646CVE-2024-29212IMAPCVE-2023-36672CVE-2024-34547command injectionCVE-2024-4651stored XSS
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook