Lucene search

K
prionPRIOn knowledge basePRION:CVE-2023-6185
HistoryDec 11, 2023 - 12:15 p.m.

Input validation

2023-12-1112:15:00
PRIOn knowledge base
www.prio-n.com
7
input validation
gstreamer integration
libreoffice
arbitrary execution
vulnerability

7.5 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

28.6%

Improper Input Validation vulnerability in GStreamer integration of The Document Foundation LibreOffice allows an attacker to execute arbitrary GStreamer plugins.

In affected versions the filename of the embedded video is not sufficiently escaped when passed to GStreamer enabling an attacker to run arbitrary gstreamer plugins depending on what plugins are installed on the target system.