Vulnetix
Try Vulnetix Request Demo
CVE-2018-16858 PUBLISHED

It was found that libreoffice before versions 6.0.7 and 6.1.3 was vulnerable to a directory traversal attack which could be used to execute arbitrary macros bundled with a document. An attacker could craft a document, which when opened by LibreOffice, would execute a Python method from a script in any arbitrary file system location, specified relative to the LibreOffice install location.

EPSS 92.34% · 99.7th percentile

Risk Scores

EPSS Score
92.34%
99.7th percentile

Affected Products

VendorProductVersions
Ubuntu:14.04:LTSlibreoffice0, 1:4.1.2~rc3-0ubuntu1, 1:4.1.2~rc3-0ubuntu2
Ubuntu:16.04:LTSlibreoffice0, 1:5.0.2-0ubuntu1, 1:5.0.2-0ubuntu2

Timeline

References

Open in Interactive Console →