CVE-2019-9855: vulnerability in Document Foundation LibreOffice
Windows 8.3 path equivalence handling flaw allows LibreLogo script execution
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
3Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackepss 3.0%
LibreOffice is typically bundled with LibreLogo, a programmable turtle vector graphics script, which can execute arbitrary python commands contained with the document it is launched from. LibreOffice also has a feature where documents can specify that pre-installed scripts can be executed on various document script events such as mouse-over, etc. Protection was added to block calling LibreLogo from script event handers. However a Windows 8.3 path equivalence handling flaw left LibreOffice vulnerable under Windows that a document could trigger executing LibreLogo via a Windows filename pseudonym. This issue affects: Document Foundation LibreOffice 6.2 versions prior to 6.2.7; 6.3 versions prior to 6.3.1.
Affected products
Document Foundation · LibreOfficeRelated CVEs — Document Foundation LibreOffice
In the same product, most dangerous first.
CVE-2019-9851—LibreLogo global-event script executionEPSS 77.8%CVE-2019-9848—CVE-2019-9848EPSS 28.9%CVE-2019-9853—Insufficient URL decoding flaw in categorizing macro locationEPSS 3.1%CVE-2019-9850—Insufficient url validation allowing LibreLogo script executionEPSS 2.9%CVE-2019-9849—CVE-2019-9849EPSS 2.6%CVE-2019-9854—Unsafe URL assembly flaw in allowed script location checkEPSS 1.8%