{"id":36775,"date":"2019-10-31T22:13:44","date_gmt":"2019-10-31T19:13:44","guid":{"rendered":"https:\/\/prohoster.info\/blog\/uyazvimost-v-libreoffice-pozvolyayushhaya-vypolnit-kod-pri-otkrytii-vredonosnyh-dokumentov\/"},"modified":"2019-10-31T22:13:44","modified_gmt":"2019-10-31T19:13:44","slug":"uyazvimost-v-libreoffice-pozvolyayushhaya-vypolnit-kod-pri-otkrytii-vredonosnyh-dokumentov","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sk\/blog\/news\/uyazvimost-v-libreoffice-pozvolyayushhaya-vypolnit-kod-pri-otkrytii-vredonosnyh-dokumentov","title":{"rendered":"Zranite\u013enos\u0165 v LibreOffice umo\u017e\u0148uj\u00faca vykonanie k\u00f3du pri otvoren\u00ed \u0161kodliv\u00fdch dokumentov","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

V kancel\u00e1rskom bal\u00edku LibreOffice bola zisten\u00e1<\/a><\/noindex> zranite\u013enos\u0165 (CVE-2019-9848<\/a><\/noindex>), ktor\u00fa je mo\u017en\u00e9 vyu\u017ei\u0165 na vykonanie \u013eubovo\u013en\u00e9ho k\u00f3du pri otvoren\u00ed dokumentov pripraven\u00fdch \u00fato\u010dn\u00edkom. <\/p>\n

Zranite\u013enos\u0165 je sp\u00f4soben\u00e1 t\u00fdm, \u017ee komponent LibreLogo, ur\u010den\u00fd na v\u00fdu\u010dbu programovania a vkladanie vektorov\u00fdch obr\u00e1zkov, preklad\u00e1 svoje oper\u00e1cie do k\u00f3du v jazyku Python. Ak m\u00e1 \u00fato\u010dn\u00edk mo\u017enos\u0165 vykona\u0165 in\u0161trukcie LibreLogo, m\u00f4\u017ee dosiahnu\u0165 vykonanie ak\u00e9hoko\u013evek k\u00f3du v jazyku Python v kontexte aktu\u00e1lnej rel\u00e1cie pou\u017e\u00edvate\u013ea, pri\u010dom vyu\u017eije pr\u00edkaz \u201erun\u201c poskytnut\u00fd v LibreLogo. Z Pythonu je mo\u017en\u00e9 pomocou funkcie system() vyvola\u0165 \u013eubovo\u013en\u00e9 syst\u00e9mov\u00e9 pr\u00edkazy.<\/p>\n

LibreLogo je volite\u013en\u00fd komponent, ale v LibreOffice sa \u0161tandardne pon\u00fakaj\u00fa makr\u00e1, ktor\u00e9 umo\u017e\u0148uj\u00fa vyvola\u0165 LibreLogo a nevy\u017eaduj\u00fa potvrdenie vykonania oper\u00e1cie, ani nezobrazuj\u00fa varovanie, aj ke\u010f je zapnut\u00fd re\u017eim maxim\u00e1lnej ochrany makier (v\u00fdber \u00farovne \u201eVery High\u201c).
\nNa \u00fatok je mo\u017en\u00e9 pripoji\u0165 tak\u00e9 makro k obsluhovate\u013eovi udalosti, ktor\u00fd sa spust\u00ed, napr\u00edklad pri umiestnen\u00ed kurzora my\u0161i na ur\u010dit\u00fa oblas\u0165 alebo pri aktiv\u00e1cii vstupn\u00e9ho fokusu na dokumente (udalosti onFocus). V\u00fdsledkom je, \u017ee pri otvoren\u00ed pripravovan\u00e9ho dokumentu \u00fato\u010dn\u00edkom m\u00f4\u017ee d\u00f4js\u0165 k skryt\u00e9mu vykonaniu k\u00f3du Python bez pri\u010dinenia pou\u017e\u00edvate\u013ea. Napr\u00edklad v predvedenom pr\u00edklade exploitovania sa pri otvoren\u00ed dokumentu bez upozornenia sp\u00fa\u0161\u0165a syst\u00e9mov\u00fd kalkula\u010dka.
\n

\"Zranite\u013enos\u0165<\/center><\/p>\n

Zranite\u013enos\u0165 bola bez nadmern\u00e9ho publicity odstr\u00e1nen\u00e1 v aktualiz\u00e1cii LibreOffice 6.2.5, vydanej 1. j\u00fala, ale ako sa uk\u00e1zalo, probl\u00e9m nebol \u00faplne vyrie\u0161en\u00fd (zablokovan\u00fd bol len pr\u00edstup LibreLogo z makier) a ost\u00e1vaj\u00fa neopravite\u013en\u00e9<\/a><\/noindex> in\u00e9 vektory na vykonanie \u00fatoku. Okrem toho, probl\u00e9m nebol vyrie\u0161en\u00fd v vydan\u00ed 6.1.6, ktor\u00e9 je odpor\u00fa\u010dan\u00e9 pre podnikov\u00fdch pou\u017e\u00edvate\u013eov. \u00dapln\u00e9 odstr\u00e1nenie zranite\u013enosti sa pl\u00e1nuje v vydan\u00ed LibreOffice 6.3, o\u010dak\u00e1vanom na bud\u00faci t\u00fd\u017ede\u0148. Do vydania plnohodnotnej aktualiz\u00e1cie sa pou\u017e\u00edvate\u013eom odpor\u00fa\u010da jasne deaktivova\u0165 komponent LibreLogo, ktor\u00fd je predvolene dostupn\u00fd vo viacer\u00fdch distrib\u00faci\u00e1ch. \u010ciasto\u010dne bola zranite\u013enos\u0165 odstr\u00e1nen\u00e1 v Debian<\/a><\/noindex>, Fedora<\/a><\/noindex>, SUSE\/openSUSE<\/a><\/noindex> a Ubuntu<\/a><\/noindex>.<\/p>\n

<\/a><\/noindex><\/p>\n

Zdroj: opennet.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0412 \u043e\u0444\u0438\u0441\u043d\u043e\u043c \u043f\u0430\u043a\u0435\u0442\u0435 LibreOffice \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c (CVE-2019-9848), \u043a\u043e\u0442\u043e\u0440\u0443\u044e \u043c\u043e\u0436\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0434\u043b\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u043f\u0440\u0438 \u043e\u0442\u043a\u0440\u044b\u0442\u0438\u0438 \u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442\u043e\u0432, \u043f\u043e\u0434\u0433\u043e\u0442\u043e\u0432\u043b\u0435\u043d\u043d\u044b\u0445 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u043c. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432\u044b\u0437\u0432\u0430\u043d\u0430 \u0442\u0435\u043c, \u0447\u0442\u043e \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442 LibreLogo, \u043f\u0440\u0435\u0434\u043d\u0430\u0437\u043d\u0430\u0447\u0435\u043d\u043d\u044b\u0439 \u0434\u043b\u044f \u043e\u0431\u0443\u0447\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044e \u0438 \u0432\u0441\u0442\u0430\u0432\u043a\u0438 \u0432\u0435\u043a\u0442\u043e\u0440\u043d\u044b\u0445 \u0440\u0438\u0441\u0443\u043d\u043a\u043e\u0432, \u0442\u0440\u0430\u043d\u0441\u043b\u0438\u0440\u0443\u0435\u0442 \u0441\u0432\u043e\u0438 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u0438 \u0432 \u043a\u043e\u0434 \u043d\u0430 \u044f\u0437\u044b\u043a\u0435 Python. \u0418\u043c\u0435\u044f \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u0438\u043d\u0441\u0442\u0440\u0443\u043a\u0446\u0438\u0438 LibreLogo \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u0434\u043e\u0431\u0438\u0442\u044c\u0441\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043b\u044e\u0431\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u043d\u0430 \u044f\u0437\u044b\u043a\u0435 Python […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":27546,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-36775","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Zranite\u013enos\u0165 v LibreOffice, ktor\u00e1 umo\u017e\u0148uje vykonanie k\u00f3du pri otvoren\u00ed \u0161kodliv\u00fdch dokumentov | ProHoster","description":"V kancel\u00e1rskom bal\u00edku LibreOffice bola zisten\u00e1 zranite\u013enos\u0165.","canonical_url":"https:\/\/prohoster.info\/sk\/blog\/news\/uyazvimost-v-libreoffice-pozvolyayushhaya-vypolnit-kod-pri-otkrytii-vredonosnyh-dokumentov","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sk_SK","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 LibreOffice, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043a\u043e\u0434 \u043f\u0440\u0438 \u043e\u0442\u043a\u0440\u044b\u0442\u0438\u0438 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0445 \u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442\u043e\u0432 | ProHoster","og:description":"\u0412 \u043e\u0444\u0438\u0441\u043d\u043e\u043c \u043f\u0430\u043a\u0435\u0442\u0435 LibreOffice \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c.","og:url":"https:\/\/prohoster.info\/sk\/blog\/news\/uyazvimost-v-libreoffice-pozvolyayushhaya-vypolnit-kod-pri-otkrytii-vredonosnyh-dokumentov","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T19:13:44+00:00","article:modified_time":"2019-10-31T19:13:44+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"36775","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-22 04:48:19","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-03-01 01:39:22","updated":"2026-01-22 04:48:19","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/posts\/36775","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/comments?post=36775"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/posts\/36775\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/media\/27546"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/media?parent=36775"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/categories?post=36775"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/tags?post=36775"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}