Privilege escalation : LibreOffice Hyperlink Document Privilege Escalation Vulnerability

Búsqueda de Vulnerabilidad		Buscar 324607 Descripciones CVE y 145615 Descripciones de Pruebas, accesos 10,000+ referencias cruzadas.
	Pruebas CVE Todos

ID de Prueba: 1.3.6.1.4.1.25623.1.0.815421

Categoría: Privilege escalation

Título: LibreOffice Hyperlink Document Privilege Escalation Vulnerability - Windows

Resumen: LibreOffice is prone to a privilege escalation vulnerability.

Descripción: Summary:
LibreOffice is prone to a privilege escalation vulnerability.

Vulnerability Insight:
The flaw is due to when processing a hyperlink
target explicitly activated by the user there was no judgment made on whether
the target was an executable file.

Vulnerability Impact:
Successful exploitation will allow attackers
to launch executable targets unconditionally on activation.

Affected Software/OS:
LibreOffice prior to 6.1.6 and 6.2 series prior to 6.2.3.

Solution:
Update to version 6.1.6, 6.2.3 or later.

CVSS Score:
6.8

CVSS Vector:
AV:N/AC:M/Au:N/C:P/I:P/A:P

Referencia Cruzada: Common Vulnerability Exposure (CVE) ID: CVE-2019-9847

Copyright Copyright (C) 2019 Greenbone Networks GmbH

Esta es sólo una de 145615 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa.
Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.

ID de Prueba:	1.3.6.1.4.1.25623.1.0.815421
Categoría:	Privilege escalation
Título:	LibreOffice Hyperlink Document Privilege Escalation Vulnerability - Windows
Resumen:	LibreOffice is prone to a privilege escalation vulnerability.
Descripción:	Summary: LibreOffice is prone to a privilege escalation vulnerability. Vulnerability Insight: The flaw is due to when processing a hyperlink target explicitly activated by the user there was no judgment made on whether the target was an executable file. Vulnerability Impact: Successful exploitation will allow attackers to launch executable targets unconditionally on activation. Affected Software/OS: LibreOffice prior to 6.1.6 and 6.2 series prior to 6.2.3. Solution: Update to version 6.1.6, 6.2.3 or later. CVSS Score: 6.8 CVSS Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2019-9847
Copyright	Copyright (C) 2019 Greenbone Networks GmbH