Test ID:	1.3.6.1.4.1.25623.1.0.812872
Category:	General
Title:	LibreOffice ODT File Information Disclosure Vulnerability (May 2018) - Windows
Summary:	LibreOffice is prone to an information disclosure vulnerability.
Description:	Summary: LibreOffice is prone to an information disclosure vulnerability. Vulnerability Insight: The flaw exists within an office:document-content element in a .odt XML document. Vulnerability Impact: Successful exploitation will allow an attacker to automatically process and initiate an SMB connection embedded in a malicious .odt file and leak NetNTLM credentials. Affected Software/OS: LibreOffice prior to version 5.4.7 or 6.0.4 on Windows. Solution: Update to version 5.4.7, 6.0.4 or later. CVSS Score: 5.0 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2018-10583 https://www.exploit-db.com/exploits/44564/ http://seclists.org/fulldisclosure/2020/Oct/26 http://secureyourit.co.uk/wp/2018/05/01/creating-malicious-odt-files/ https://lists.apache.org/thread.html/6c65f22306c36c95e75f8d2b7f49cfcbeb0a4614245c20934612a39d@%3Cdev.openoffice.apache.org%3E https://lists.apache.org/thread.html/0598708912978b27121b2e380b44a225c706aca882cd1da6a955a0af@%3Cdev.openoffice.apache.org%3E https://lists.apache.org/thread.html/c8fd59ac77b42aac90eb5c59b87f3ab59b5e0c3bfb4819aa649a2909@%3Cdev.openoffice.apache.org%3E RedHat Security Advisories: RHSA-2018:3054 https://access.redhat.com/errata/RHSA-2018:3054 https://usn.ubuntu.com/3883-1/
Copyright	Copyright (C) 2018 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.