{"id":108766,"date":"2023-05-29T09:10:14","date_gmt":"2023-05-29T07:10:14","guid":{"rendered":"https:\/\/prohoster.info\/?p=108766"},"modified":"2023-05-29T09:39:13","modified_gmt":"2023-05-29T07:39:13","slug":"dve-uyazvimosti-v-libreoffice","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sv\/blog\/news\/dve-uyazvimosti-v-libreoffice","title":{"rendered":"Tv\u00e5 s\u00e5rbarheter i LibreOffice","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"
Information has been revealed about two vulnerabilities in the free office suite LibreOffice, with the most dangerous potentially allowing code execution when opening a specially crafted document. The first vulnerability was quietly fixed in the March releases 7.4.6 and 7.5.1, while the second was addressed in the May updates of LibreOffice 7.4.7 and 7.5.3. <\/p>\n
The first vulnerability (CVE-2023-0950) potentially allows an attacker to execute their code in the system when opening a spreadsheet that includes specially modified formulas, such as AGGREGATE, which have fewer parameters than expected. The issue is caused by an array index underflow in the formula parsing code (ScInterpreter) used when processing spreadsheets. <\/p>\n
Den andra s\u00e5rbarheten (CVE-2023-2255) m\u00f6jligg\u00f6r f\u00f6r en angripare att f\u00f6rbereda ett specialformat dokument, varvid externa l\u00e4nkar laddas ner utan att en varning eller fr\u00e5ga visas n\u00e4r dokumentet \u00f6ppnas. Detta strider mot det angivna beteendet hos LibreOffice, som ska ge en varning vid laddning av relaterat inneh\u00e5ll. Problemet orsakas av en brist i koden f\u00f6r beh\u00f6righetsanfr\u00e5gningar n\u00e4r mekanismen \"Floating Frames\" anv\u00e4nds, vilket liknar iframe i HTML och till\u00e5ter dynamisk inkludering av inneh\u00e5ll fr\u00e5n externa filer i dokumentet. \n K\u00e4lla: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"