Multiple vulnerabilities in LibreOffice

説明

Multiple vulnerabilities were found in LibreOffice. Malicious users can exploit these vulnerabilities to execute arbitrary code.

Below is a complete list of vulnerabilities:

1. Improper input validation vulnerability can be exploited remotely to execute arbitrary code.
2. Remote code execution vulnerability can be exploited remotely to execute arbitrary code.

オリジナルアドバイザリー

• CVE-2023-6186: Link targets allow arbitrary script execution

• CVE-2023-6185: Improper input validation enabling arbitrary Gstreamer pipeline injection

エクスプロイテーション

Public exploits exist for this vulnerability.

CVEリスト

• CVE-2023-6186
  critical
• CVE-2023-6185
  critical

も参照してください

お住まいの地域に広がる脆弱性の統計をご覧ください statistics.securelist.com