Published: 15/08/2019 Updated: 07/11/2023

CVSS v2 Base Score: 6.8 | Impact Score: 6.4 | Exploitability Score: 8.6

CVSS v3 Base Score: 7.8 | Impact Score: 5.9 | Exploitability Score: 1.8

VMScore: 605

Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P

LibreOffice has a feature where documents can specify that pre-installed macros can be executed on various script events such as mouse-over, document-open etc. Access is intended to be restricted to scripts under the share/Scripts/python, user/Scripts/python sub-directories of the LibreOffice install. Protection was added, to address CVE-2018-16858, to avoid a directory traversal attack where scripts in arbitrary locations on the file system could be executed. However this new protection could be bypassed by a URL encoding attack. In the fixed versions, the parsed url describing the script location is correctly encoded before further processing. This issue affects: Document Foundation LibreOffice versions before 6.2.6.

Vulnerable Product	Search on Vulmon	Subscribe to Product
debian debian linux 8.0
debian debian linux 9.0
debian debian linux 10.0
canonical ubuntu linux 18.04
opensuse leap 15.0
canonical ubuntu linux 19.04
fedoraproject fedora 29
opensuse leap 15.1
canonical ubuntu linux 16.04
libreoffice libreoffice

Several security issues were fixed in LibreOffice ...

It was discovered that the code fixes for LibreOffice to address CVE-2019-9852 were not complete Additional information can be found at wwwlibreofficeorg/about-us/security/advisories/CVE-2019-9854/ For the oldstable distribution (stretch), this problem has been fixed in version 1:527-1+deb9u11 For the stable distribution (buster), th ...

It was discovered that the code fixes to address CVE-2018-16858 and CVE-2019-9848 were not complete For the oldstable distribution (stretch), these problems have been fixed in version 1:527-1+deb9u10 For the stable distribution (buster), these problems have been fixed in version 1:615-3+deb10u3 We recommend that you upgrade your libreoffice ...

LibreOffice has a feature where documents can specify that pre-installed scripts can be executed on various document events such as mouse-over, etc LibreOffice is typically also bundled with LibreLogo, a programmable turtle vector graphics script, which can be manipulated into executing arbitrary python commands By using the document event featur ...

Impact: Moderate Public Date: 2019-08-15 CWE: CWE-22 Bugzilla: 1744868: CVE-2019-9852 libreoffice: Insu ...

CWE-22 https://www.libreoffice.org/about-us/security/advisories/CVE-2019-9852 https://seclists.org/bugtraq/2019/Aug/28 https://www.debian.org/security/2019/dsa-4501 https://usn.ubuntu.com/4102-1/http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00006.html https://seclists.org/bugtraq/2019/Sep/17 http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00067.html https://lists.debian.org/debian-lts-announce/2019/10/msg00005.html https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PMEGUWMWORC3DOVEHVXLFT3A5RSCMLBH/https://nvd.nist.gov https://usn.ubuntu.com/4102-1/

CVE-2019-9852

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

References

Vulmon Search

About

Products

Connect