CVE-2018-10583

2018-05-0116:29:00

Debian Security Bug Tracker

security-tracker.debian.org

0.19 Low

EPSS

Percentile

96.2%

JSON

An information disclosure vulnerability occurs when LibreOffice 6.0.3 and Apache OpenOffice Writer 4.1.5 automatically process and initiate an SMB connection embedded in a malicious file, as demonstrated by xlink:href=file://192.168.0.2/test.jpg within an office:document-content element in a .odt XML document.

OSVersionArchitecturePackageVersionFilename
Debian12alllibreoffice<= 4:7.4.7-1+deb12u1libreoffice_4:7.4.7-1+deb12u1_all.deb
Debian11alllibreoffice<= 1:7.0.4-4+deb11u8libreoffice_1:7.0.4-4+deb11u8_all.deb
Debian10alllibreoffice<= 1:6.1.5-3+deb10u7libreoffice_1:6.1.5-3+deb10u7_all.deb
Debian999alllibreoffice<= 4:24.2.3-1libreoffice_4:24.2.3-1_all.deb
Debian13alllibreoffice<= 4:24.2.3-1libreoffice_4:24.2.3-1_all.deb

OS	Version	Architecture	Package	Version	Filename
Debian	12	all	libreoffice	<= 4:7.4.7-1+deb12u1	libreoffice_4:7.4.7-1+deb12u1_all.deb
Debian	11	all	libreoffice	<= 1:7.0.4-4+deb11u8	libreoffice_1:7.0.4-4+deb11u8_all.deb
Debian	10	all	libreoffice	<= 1:6.1.5-3+deb10u7	libreoffice_1:6.1.5-3+deb10u7_all.deb
Debian	999	all	libreoffice	<= 4:24.2.3-1	libreoffice_4:24.2.3-1_all.deb
Debian	13	all	libreoffice	<= 4:24.2.3-1	libreoffice_4:24.2.3-1_all.deb