{"id":108766,"date":"2023-05-29T09:10:14","date_gmt":"2023-05-29T07:10:14","guid":{"rendered":"https:\/\/prohoster.info\/?p=108766"},"modified":"2023-05-29T09:39:13","modified_gmt":"2023-05-29T07:39:13","slug":"dve-uyazvimosti-v-libreoffice","status":"publish","type":"post","link":"https:\/\/prohoster.info\/ro\/blog\/news\/dve-uyazvimosti-v-libreoffice","title":{"rendered":"Dou\u0103 vulnerabilit\u0103\u021bi \u00een LibreOffice","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Au fost dezv\u0103luite informa\u021bii despre dou\u0103 vulnerabilit\u0103\u021bi \u00een pachetul de birou gratuit LibreOffice, dintre care cea mai periculoas\u0103 permite poten\u021bial executarea de cod prin deschiderea unui document special conceput. Prima vulnerabilitate a fost remediat\u0103 f\u0103r\u0103 mare agita\u021bie \u00een versiunile din martie 7.4.6 \u0219i 7.5.1, iar a doua \u00een actualiz\u0103rile din mai pentru LibreOffice 7.4.7 \u0219i 7.5.3. <\/p>\n

Prima vulnerabilitate (CVE-2023-0950) permite poten\u021bial executarea de cod \u00een sistem prin deschiderea unei foi de calcul care include formule special modificate, cum ar fi AGGREGATE, \u00een care sunt transmise mai pu\u021bine parametri dec\u00e2t se a\u0219teapt\u0103. Problema este cauzat\u0103 de o dep\u0103\u0219ire (underflow) a indexului unui tablou \u00een codul de analiz\u0103 a formulilor (ScInterpreter) utilizat la procesarea foilor de calcul. <\/p>\n

A doua vulnerabilitate (CVE-2023-2255) permite unui atacator s\u0103 preg\u0103teasc\u0103 un document special conceput, iar la deschiderea acestuia, f\u0103r\u0103 a fi afi\u0219at un mesaj de solicitare sau de avertizare, se vor \u00eenc\u0103rca linkuri externe, ceea ce nu corespunde comportamentului declarat al LibreOffice, care presupune afi\u0219area unui avertisment la \u00eenc\u0103rcarea con\u021binutului asociat. Problema este cauzat\u0103 de o necorelare \u00een codul de solicitare a permisiunilor atunci c\u00e2nd se folose\u0219te mecanismul \u201eFloating Frames\u201d, similar cu iframe \u00een HTML, care permite includerea dinamic\u0103 a con\u021binutului din fi\u0219iere externe \u00een document.
\n
Sursa: opennet.ro<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0420\u0430\u0441\u043a\u0440\u044b\u0442\u0430 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043e \u0434\u0432\u0443\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u0445 \u0432 \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u043c \u043e\u0444\u0438\u0441\u043d\u043e\u043c \u043f\u0430\u043a\u0435\u0442\u0435 LibreOffice, \u043d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u043e\u043f\u0430\u0441\u043d\u0430\u044f \u0438\u0437 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043a\u043e\u0434 \u043f\u0440\u0438 \u043e\u0442\u043a\u0440\u044b\u0442\u0438\u0438 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043e\u0444\u043e\u0440\u043c\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442\u0430. \u041f\u0435\u0440\u0432\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0431\u044b\u043b\u0430 \u0431\u0435\u0437 \u043b\u0438\u0448\u043d\u0435\u0439 \u043e\u0433\u043b\u0430\u0441\u043a\u0438 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430 \u0432 \u043c\u0430\u0440\u0442\u043e\u0432\u0441\u043a\u0438\u0445 \u0432\u044b\u043f\u0443\u0441\u043a\u0430\u0445 7.4.6 \u0438 7.5.1, \u0430 \u0432\u0442\u043e\u0440\u0430\u044f \u0432 \u043c\u0430\u0439\u0441\u043a\u0438\u0445 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f\u0445 LibreOffice 7.4.7 \u0438 7.5.3. \u041f\u0435\u0440\u0432\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c (CVE-2023-0950) \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0434\u043e\u0431\u0438\u0442\u044c\u0441\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0441\u0432\u043e\u0435\u0433\u043e \u043a\u043e\u0434\u0430 \u0432 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-108766","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Dou\u0103 vulnerabilit\u0103\u021bi \u00een LibreOffice | ProHoster","description":"Au fost dezv\u0103luite informa\u021bii despre dou\u0103 vulnerabilit\u0103\u021bi \u00een pachetul de birou gratuit LibreOffice, dintre care cea mai periculoas\u0103 permite poten\u021bial executarea de cod prin deschiderea unui document special conceput.","canonical_url":"https:\/\/prohoster.info\/ro\/blog\/news\/dve-uyazvimosti-v-libreoffice","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"ro_RO","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0414\u0432\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 LibreOffice | ProHoster","og:description":"\u0420\u0430\u0441\u043a\u0440\u044b\u0442\u0430 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043e \u0434\u0432\u0443\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u0445 \u0432 \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u043c \u043e\u0444\u0438\u0441\u043d\u043e\u043c \u043f\u0430\u043a\u0435\u0442\u0435 LibreOffice, \u043d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u043e\u043f\u0430\u0441\u043d\u0430\u044f \u0438\u0437 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043a\u043e\u0434 \u043f\u0440\u0438 \u043e\u0442\u043a\u0440\u044b\u0442\u0438\u0438 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043e\u0444\u043e\u0440\u043c\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442\u0430.","og:url":"https:\/\/prohoster.info\/ro\/blog\/news\/dve-uyazvimosti-v-libreoffice","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2023-05-29T07:10:14+00:00","article:modified_time":"2023-05-29T07:39:13+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":[],"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/108766","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/comments?post=108766"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/108766\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/media?parent=108766"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/categories?post=108766"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/tags?post=108766"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}