SUSE SLED12 Security Update : libreoffice (SUSE-SU-2018:0443-1)

This update for libreoffice fixes the following issues: LibreOffice was updated to 5.4.5.1 : - CVE-2018-6871: Fixes data exposure when using WEBSERVICE bsc1080249 Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has...

Fedora 27 : libreoffice (2018-3eb4d8e4c4)

The remote Fedora 27 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2018-3eb4d8e4c4 advisory. - CVE-2018-1055 Remote arbitrary file disclosure vulnerability via WEBSERVICE formula Tenable has extracted the preceding description block directly...

openSUSE Security Update : libreoffice (openSUSE-2018-162)

This update for libreoffice fixes the following issues : LibreOffice was updated to 5.4.5.1 : - CVE-2018-6871: Fixes data exposure when using WEBSERVICE bsc1080249 This update was imported from the SUSE:SLE-12-SP3:Update update project. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The...

SUSE-SU-2018:0443-1 Security update for libreoffice

This update for libreoffice fixes the following issues: LibreOffice was updated to 5.4.5.1: - CVE-2018-6871: Fixes data exposure when using WEBSERVICE bsc1080249...

CVE-2018-6871

A flaw was found in libreoffice before 5.4.5 and before 6.0.1. Arbitrary remote file disclosure may be achieved by the use of the WEBSERVICE formula in a specially crafted ODS file...

SUSE SLED12 Security Update : libreoffice (SUSE-SU-2018:0428-1)

This update for libreoffice fixes the following issues: LibreOffice was updated to 5.4.5.1 : - CVE-2018-6871: Fixes data exposure when using WEBSERVICE bsc1080249 Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has...

[SECURITY] [DSA 4111-2] libreoffice security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4111-2 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff February 12, 2018 https://www.debian.org/security/faq -...

[SECURITY] [DSA 4111-1] libreoffice security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4111-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff February 11, 2018 https://www.debian.org/security/faq -...

LibreOffice 6.0.1 - WEBSERVICE Remote Arbitrary File Disclosure

LibreOffice 6.0.1 - WEBSERVICE Remote Arbitrary File Disclosure Vulnerability description CVE-2018-6871 First part LibreOffice supports COM.MICROSOFT.WEBSERVICE function: https://support.office.com/en-us/article/webservice-function-0546a35a-ecc6-4739-aed7-c0b7ce1562c4 The function is required to...

CVE-2018-1055

CVE-2018-6871, referenced as CVE-2018-1055 in reservation, affects LibreOffice via improper validation of the WEBSERVICE() function argument. This allows a remote, unauthenticated attacker to disclose arbitrary files by convincing a user to open a specially crafted document (information disclosur...

CVE-2018-6871

LibreOffice prior to 5.4.5 and 6.x prior to 6.0.1 is vulnerable to a remote arbitrary file disclosure via the WEBSERVICE function (COM.MICROSOFT.WEBSERVICE) in documents, allowing an attacker to read sensitive files. Root cause: insufficient validation/restrictions on WEBSERVICE arguments. Affect...

KLA11198 RLF vulnerability in LibreOffice

A vulnerability was found in LibreOffice. By exploiting this vulnerability malicious users can read local files. This vulnerability can be exploited via WEBSERVICE calls in a document, which use the COM.MICROSOFT.WEBSERVICE function. Original advisories LibreOffice Security Advisory Exploitation...

LibreOffice -- Remote arbitrary file disclosure vulnerability via WEBSERVICE formula

LibreOffice reports: LibreOffice Calc supports a WEBSERVICE function to obtain data by URL. Vulnerable versions of LibreOffice allow WEBSERVICE to take a local file URL e.g file:// which can be used to inject local files into the spreadsheet without warning the user. Subsequent formulas can opera...

CVE-2017-6871

CVE-2017-6871 affects Siemens SIMATIC WinCC Sm@rtClient for Android and Sm@rtClient Lite for Android (all versions before 1.0.2.2). The vulnerability is an authentication bypass: when a device is unlocked and the affected app runs, an attacker with physical access could bypass the app’s authentic...

CVE-2015-6871

...

CVE-2015-6871

CVE-2015-6871 is rejected and not used; it does not represent an active vulnerability entry.

CVE-2016-6871

CVE-2016-6871: Integer overflow in Bcmath within Facebook HHVM before 3.15.0 can trigger a buffer overflow via unknown vectors, with unspecified impact. Affected product: Facebook HHVM (HipHop VM). Practical impact is described as overflow-related, but the exact exploit scenarios are not detailed...

CVE-2014-6871

The CVE-2014-6871 entry concerns the Android app Hogs Fly Crazy (com.pedrojayme.hogsflycrazy) version 1.0.0, which does not verify X.509 certificates from SSL servers. This configuration flaw allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certif...

CVE-2008-6871

CVE-2008-6871 affects Merlix Educate Server, which stores db.mdb under the web root with insufficient access control, enabling remote attackers to obtain unspecified sensitive information via a direct request. The NVD entry documents a MEDIUM-severity issue (CVSSv2: AV:N/AC:L/Au:N/C:P/I:N/A:N) wi...

CVE-2006-6871

CVE-2006-6871 affects eNdonesia 8.4 with four XSS vectors : (1) mod.php viewlink parameter (mod), (2) informasi module showinfo intypeid, (3) the "your Friend" field in friend.php, (4) the "Main Text" field in admin.php. The vulnerability allows remote attackers to inject arbitrary web script or ...