KLA49330
Multiple vulnerabilities in LibreOffice

Multiple vulnerabilities were found in LibreOffice. Malicious users can exploit these vulnerabilities to bypass security restrictions, execute arbitrary code.

Below is a complete list of vulnerabilities:

1. Improper Access Control vulnerability in IFrame can be exploited to bypass security restrictions.
2. Improper Validation of Array Index vulnerability in Calc Formula Parsing can be exploited remotely to execute arbitrary code.

LibreOffice earlier than 7.4.7
LibreOffice 7.5.x earlier than 7.5.3

Update to the latest version
Download LibreOffice

Array Index UnderFlow in Calc Formula Parsing
Remote documents loaded without prompt via IFrame