CVE-2019-9850

CVE-2019-9850: vulnerability in Document Foundation LibreOffice

Insufficient url validation allowing LibreLogo script execution

Published · Updated

Follow this CVE+ Monitor LibreOffice+ Monitor libreoffice

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 2.9%
LibreOffice is typically bundled with LibreLogo, a programmable turtle vector graphics script, which can execute arbitrary python commands contained with the document it is launched from. LibreOffice also has a feature where documents can specify that pre-installed scripts can be executed on various document script events such as mouse-over, etc. Protection was added, to address CVE-2019-9848, to block calling LibreLogo from script event handers. However an insufficient url validation vulnerability in LibreOffice allowed malicious to bypass that protection and again trigger calling LibreLogo from script event handlers. This issue affects: Document Foundation LibreOffice versions prior to 6.2.6.
Affected products
Document Foundation · LibreOffice
Related CVEs — Document Foundation LibreOffice

In the same product, most dangerous first.

CVE-2019-9851—LibreLogo global-event script executionEPSS 77.8%CVE-2019-9848—CVE-2019-9848EPSS 28.9%CVE-2019-9853—Insufficient URL decoding flaw in categorizing macro locationEPSS 3.1%CVE-2019-9855—Windows 8.3 path equivalence handling flaw allows LibreLogo script executionEPSS 3.0%CVE-2019-9849—CVE-2019-9849EPSS 2.6%CVE-2019-9854—Unsafe URL assembly flaw in allowed script location checkEPSS 1.8%