OSI vulnerabilities in LibreOffice

Beschreibung

Information disclosure vulnerabilities were found in LibreOffice. Malicious users can exploit these vulnerabilities to obtain sensitive information, gain privileges.

Ursprüngliche Informationshinweise

• CVE-2024-12425: Path traversal leading to arbitrary .ttf file write

• CVE-2024-12426: URL fetching can be used to exfiltrate arbitrary INI file values and environment variables

Ausnutzung

Malware exists for this vulnerability. Usually such malware is classified as Exploit. More details.

Betroffene Produkte

• LibreOffice

CVE Liste

• CVE-2024-12425
  warning
• CVE-2024-12426
  high

Mehr erfahren

Informieren Sie sich über die Statistiken der in Ihrer Region verbreiteten Sicherheitslücken statistics.securelist.com