Vulnerabilities in LibreOffice that allow execution of a Gstreamer script or plugin
Information has been disclosed about two vulnerabilities in the free office suite LibreOffice, which are assigned a high level of danger (8.3 out of 10). The issues have been resolved in the recent LibreOffice 7.6.4 and 7.5.9 updates. The first vulnerability (CVE-2023-6186) allows the execution of an arbitrary script when a user clicks on a link specially added to a document that launches built-in macros or internal commands. In certain situations it was possible [...]