Critical severity · published Mar 25, 2019
CVE-2018-16858
It was found that libreoffice before versions 6.0.7 and 6.1.3 was vulnerable to a directory traversal attack which could be used to execute arbitrary macros bundled with a…
9.8
CVSS
67.3%
EPSS
No
On KEV
Description
It was found that libreoffice before versions 6.0.7 and 6.1.3 was vulnerable to a directory traversal attack which could be used to execute arbitrary macros bundled with a document. An attacker could craft a document, which when opened by LibreOffice, would execute a Python method from a script in any arbitrary file system location, specified relative to the LibreOffice install location.
CVSS vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)67.3% · higher than 99% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
LI
Libreoffice · Libreoffice
before 6.0.7; 6.1.0 before 6.1.3 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2018-16858
CVE.org
https://www.cve.org/CVERecord?id=CVE-2018-16858
lists.opensuse.org
http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00059.html
Exploit
http://packetstormsecurity.com/files/152560/LibreOffice-Macro-Code-Execution.html
Third Party Advisory
http://www.rapid7.com/db/modules/exploit/multi/fileformat/libreoffice_macro_exec
access.redhat.com
https://access.redhat.com/errata/RHSA-2019:2130
Issue Tracking
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-16858
seclists.org
https://seclists.org/bugtraq/2019/Aug/28
More from Libreoffice
9.8
CVE-2024-5261
Improper Certificate Validation vulnerability in LibreOffice "LibreOfficeKit" mode disables TLS certification verification LibreOfficeKit can be used for accessing LibreOffice…
9.8
CVE-2019-9855
LibreOffice is typically bundled with LibreLogo, a programmable turtle vector graphics script, which can execute arbitrary python commands contained with the document it is…
9.8
CVE-2019-9851
LibreOffice is typically bundled with LibreLogo, a programmable turtle vector graphics script, which can execute arbitrary python commands contained with the document it is…
9.8
CVE-2019-9850
LibreOffice is typically bundled with LibreLogo, a programmable turtle vector graphics script, which can execute arbitrary python commands contained with the document it is…
9.8
CVE-2019-9848
LibreOffice has a feature where documents can specify that pre-installed scripts can be executed on various document events such as mouse-over, etc