USN-3579-1 libreoffice vulnerability

It was discovered that =WEBSERVICE calls in a document could be used to read arbitrary files. If a user were tricked in to opening a specially crafted document, a remote attacker could exploit this to obtain sensitive information. CVE-2018-6871...

USN-3579-1: LibreOffice vulnerability

It was discovered that =WEBSERVICE calls in a document could be used to read arbitrary files. If a user were tricked in to opening a specially crafted document, a remote attacker could exploit this to obtain sensitive information. CVE-2018-6871...

openSUSE Security Update : libreoffice (openSUSE-2018-162)

This update for libreoffice fixes the following issues : LibreOffice was updated to 5.4.5.1 : - CVE-2018-6871: Fixes data exposure when using WEBSERVICE bsc1080249 This update was imported from the SUSE:SLE-12-SP3:Update update project. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The...

Fedora 27 : libreoffice (2018-3eb4d8e4c4)

The remote Fedora 27 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2018-3eb4d8e4c4 advisory. - CVE-2018-1055 Remote arbitrary file disclosure vulnerability via WEBSERVICE formula Tenable has extracted the preceding description block directly...

SUSE SLED12 Security Update : libreoffice (SUSE-SU-2018:0443-1)

This update for libreoffice fixes the following issues: LibreOffice was updated to 5.4.5.1 : - CVE-2018-6871: Fixes data exposure when using WEBSERVICE bsc1080249 Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has...

SUSE-SU-2018:0443-1 Security update for libreoffice

This update for libreoffice fixes the following issues: LibreOffice was updated to 5.4.5.1: - CVE-2018-6871: Fixes data exposure when using WEBSERVICE bsc1080249...

CVE-2018-6871

A flaw was found in libreoffice before 5.4.5 and before 6.0.1. Arbitrary remote file disclosure may be achieved by the use of the WEBSERVICE formula in a specially crafted ODS file...

SUSE SLED12 Security Update : libreoffice (SUSE-SU-2018:0428-1)

This update for libreoffice fixes the following issues: LibreOffice was updated to 5.4.5.1 : - CVE-2018-6871: Fixes data exposure when using WEBSERVICE bsc1080249 Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has...

[SECURITY] [DSA 4111-2] libreoffice security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4111-2 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff February 12, 2018 https://www.debian.org/security/faq -...

[SECURITY] [DSA 4111-1] libreoffice security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4111-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff February 11, 2018 https://www.debian.org/security/faq -...

LibreOffice 6.0.1 - WEBSERVICE Remote Arbitrary File Disclosure

LibreOffice 6.0.1 - WEBSERVICE Remote Arbitrary File Disclosure Vulnerability description CVE-2018-6871 First part LibreOffice supports COM.MICROSOFT.WEBSERVICE function: https://support.office.com/en-us/article/webservice-function-0546a35a-ecc6-4739-aed7-c0b7ce1562c4 The function is required to...

CVE-2018-1055

CVE-2018-6871, referenced as CVE-2018-1055 in reservation, affects LibreOffice via improper validation of the WEBSERVICE() function argument. This allows a remote, unauthenticated attacker to disclose arbitrary files by convincing a user to open a specially crafted document (information disclosur...

CVE-2018-6871

LibreOffice prior to 5.4.5 and 6.x prior to 6.0.1 is vulnerable to a remote arbitrary file disclosure via the WEBSERVICE function (COM.MICROSOFT.WEBSERVICE) in documents, allowing an attacker to read sensitive files. Root cause: insufficient validation/restrictions on WEBSERVICE arguments. Affect...

KLA11198 RLF vulnerability in LibreOffice

A vulnerability was found in LibreOffice. By exploiting this vulnerability malicious users can read local files. This vulnerability can be exploited via WEBSERVICE calls in a document, which use the COM.MICROSOFT.WEBSERVICE function. Original advisories LibreOffice Security Advisory Exploitation...

LibreOffice -- Remote arbitrary file disclosure vulnerability via WEBSERVICE formula

LibreOffice reports: LibreOffice Calc supports a WEBSERVICE function to obtain data by URL. Vulnerable versions of LibreOffice allow WEBSERVICE to take a local file URL e.g file:// which can be used to inject local files into the spreadsheet without warning the user. Subsequent formulas can opera...

CVE-2017-6871

CVE-2017-6871 affects Siemens SIMATIC WinCC Sm@rtClient for Android and Sm@rtClient Lite for Android (all versions before 1.0.2.2). The vulnerability is an authentication bypass: when a device is unlocked and the affected app runs, an attacker with physical access could bypass the app’s authentic...

CVE-2015-6871

...

CVE-2015-6871

CVE-2015-6871 is rejected and not used; it does not represent an active vulnerability entry.

CVE-2016-6871

CVE-2016-6871: Integer overflow in Bcmath within Facebook HHVM before 3.15.0 can trigger a buffer overflow via unknown vectors, with unspecified impact. Affected product: Facebook HHVM (HipHop VM). Practical impact is described as overflow-related, but the exact exploit scenarios are not detailed...

CVE-2014-6871

The CVE-2014-6871 entry concerns the Android app Hogs Fly Crazy (com.pedrojayme.hogsflycrazy) version 1.0.0, which does not verify X.509 certificates from SSL servers. This configuration flaw allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certif...