{"id":108766,"date":"2023-05-29T09:10:14","date_gmt":"2023-05-29T07:10:14","guid":{"rendered":"https:\/\/prohoster.info\/?p=108766"},"modified":"2023-05-29T09:39:13","modified_gmt":"2023-05-29T07:39:13","slug":"dve-uyazvimosti-v-libreoffice","status":"publish","type":"post","link":"https:\/\/prohoster.info\/fr\/blog\/news\/dve-uyazvimosti-v-libreoffice","title":{"rendered":"Deux vuln\u00e9rabilit\u00e9s dans LibreOffice","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Des informations ont \u00e9t\u00e9 r\u00e9v\u00e9l\u00e9es sur deux vuln\u00e9rabilit\u00e9s dans la suite bureautique libre LibreOffice, la plus dangereuse permettant potentiellement l'ex\u00e9cution de code lors de l'ouverture d'un document sp\u00e9cialement con\u00e7u. La premi\u00e8re vuln\u00e9rabilit\u00e9 a \u00e9t\u00e9 corrig\u00e9e discr\u00e8tement dans les versions de mars 7.4.6 et 7.5.1, tandis que la seconde a \u00e9t\u00e9 corrig\u00e9e dans les mises \u00e0 jour de mai de LibreOffice 7.4.7 et 7.5.3. <\/p>\n

La premi\u00e8re vuln\u00e9rabilit\u00e9 (CVE-2023-0950) permet potentiellement d'ex\u00e9cuter son propre code sur le syst\u00e8me lors de l'ouverture d'un tableau incluant des formules sp\u00e9cialement modifi\u00e9es, telles que AGGREGATE, dans lesquelles moins de param\u00e8tres que pr\u00e9vu sont transmis. Le probl\u00e8me est caus\u00e9 par un d\u00e9passement d'indice de tableau par le bas (underflow) dans le code d'analyse des formules (ScInterpreter) utilis\u00e9 lors du traitement des tableaux. <\/p>\n

La deuxi\u00e8me vuln\u00e9rabilit\u00e9 (CVE-2023-2255) permet \u00e0 un attaquant de pr\u00e9parer un document sp\u00e9cialement format\u00e9, dont l'ouverture chargerait des liens externes sans afficher de demande et d'avertissement, ce qui ne correspond pas au comportement annonc\u00e9 de LibreOffice, qui implique l'affichage d'un avertissement lors du chargement de contenu li\u00e9. Le probl\u00e8me est caus\u00e9 par un d\u00e9faut dans le code de requ\u00eate d'autorisation lors de l'utilisation du m\u00e9canisme \u00ab Floating Frames \u00bb, similaire \u00e0 iframe en HTML, et permettant d'inclure dynamiquement le contenu de fichiers externes dans le document.
\n
Source : opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0420\u0430\u0441\u043a\u0440\u044b\u0442\u0430 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043e \u0434\u0432\u0443\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u0445 \u0432 \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u043c \u043e\u0444\u0438\u0441\u043d\u043e\u043c \u043f\u0430\u043a\u0435\u0442\u0435 LibreOffice, \u043d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u043e\u043f\u0430\u0441\u043d\u0430\u044f \u0438\u0437 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043a\u043e\u0434 \u043f\u0440\u0438 \u043e\u0442\u043a\u0440\u044b\u0442\u0438\u0438 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043e\u0444\u043e\u0440\u043c\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442\u0430. \u041f\u0435\u0440\u0432\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0431\u044b\u043b\u0430 \u0431\u0435\u0437 \u043b\u0438\u0448\u043d\u0435\u0439 \u043e\u0433\u043b\u0430\u0441\u043a\u0438 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430 \u0432 \u043c\u0430\u0440\u0442\u043e\u0432\u0441\u043a\u0438\u0445 \u0432\u044b\u043f\u0443\u0441\u043a\u0430\u0445 7.4.6 \u0438 7.5.1, \u0430 \u0432\u0442\u043e\u0440\u0430\u044f \u0432 \u043c\u0430\u0439\u0441\u043a\u0438\u0445 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f\u0445 LibreOffice 7.4.7 \u0438 7.5.3. \u041f\u0435\u0440\u0432\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c (CVE-2023-0950) \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0434\u043e\u0431\u0438\u0442\u044c\u0441\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0441\u0432\u043e\u0435\u0433\u043e \u043a\u043e\u0434\u0430 \u0432 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-108766","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Deux vuln\u00e9rabilit\u00e9s dans LibreOffice | ProHoster","description":"Des informations ont \u00e9t\u00e9 r\u00e9v\u00e9l\u00e9es sur deux vuln\u00e9rabilit\u00e9s dans la suite bureautique libre LibreOffice, la plus dangereuse permettant potentiellement l'ex\u00e9cution de code lors de l'ouverture d'un document sp\u00e9cialement con\u00e7u.","canonical_url":"https:\/\/prohoster.info\/fr\/blog\/news\/dve-uyazvimosti-v-libreoffice","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"fr_FR","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0414\u0432\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 LibreOffice | ProHoster","og:description":"\u0420\u0430\u0441\u043a\u0440\u044b\u0442\u0430 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043e \u0434\u0432\u0443\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u0445 \u0432 \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u043c \u043e\u0444\u0438\u0441\u043d\u043e\u043c \u043f\u0430\u043a\u0435\u0442\u0435 LibreOffice, \u043d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u043e\u043f\u0430\u0441\u043d\u0430\u044f \u0438\u0437 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043a\u043e\u0434 \u043f\u0440\u0438 \u043e\u0442\u043a\u0440\u044b\u0442\u0438\u0438 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043e\u0444\u043e\u0440\u043c\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442\u0430.","og:url":"https:\/\/prohoster.info\/fr\/blog\/news\/dve-uyazvimosti-v-libreoffice","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2023-05-29T07:10:14+00:00","article:modified_time":"2023-05-29T07:39:13+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":[],"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/posts\/108766","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/comments?post=108766"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/posts\/108766\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/media?parent=108766"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/categories?post=108766"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/tags?post=108766"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}