OSI vulnerabilities in LibreOffice

Descripción

Information disclosure vulnerabilities were found in LibreOffice. Malicious users can exploit these vulnerabilities to obtain sensitive information, gain privileges.

Notas informativas originales

• CVE-2024-12425: Path traversal leading to arbitrary .ttf file write

• CVE-2024-12426: URL fetching can be used to exfiltrate arbitrary INI file values and environment variables

Explotación

Malware exists for this vulnerability. Usually such malware is classified as Exploit. More details.

Productos relacionados

• LibreOffice

Lista CVE

• CVE-2024-12425
  warning
• CVE-2024-12426
  high

Leer más

Conozca las estadísticas de las vulnerabilidades que se propagan en su región statistics.securelist.com