| Package | Affected versions | Patched versions |
|---|---|---|
| openoffice | = 4.1.5 | |
| libreoffice | = 6.0.3 |
An information disclosure vulnerability occurs when LibreOffice 6.0.3 and Apache OpenOffice Writer 4.1.5 automatically process and initiate an SMB connection embedded in a malicious file, as demonstrated by xlink:href=file://192.168.0.2/test.jpg within an office:document-content element in a .odt XML document.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free