OSI vulnerabilities in LibreOffice

Описание

Information disclosure vulnerabilities were found in LibreOffice. Malicious users can exploit these vulnerabilities to obtain sensitive information, gain privileges.

Первичный источник обнаружения

• CVE-2024-12425: Path traversal leading to arbitrary .ttf file write
  CVE-2024-12426: URL fetching can be used to exfiltrate arbitrary INI file values and environment variables
  

Эксплуатация

Malware exists for this vulnerability. Usually such malware is classified as Exploit. More details.

Связанные продукты

• LibreOffice

Список CVE

• CVE-2024-12425
  warning
• CVE-2024-12426
  high

Смотрите также

Узнай статистику распространения уязвимостей в своем регионе statistics.securelist.com