CVE-2019-9849
4.3
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Exploitability: 2.8 / Impact: 1.4
Source: NVD
Description
LibreOffice has a 'stealth mode' in which only documents from locations deemed 'trusted' are allowed to retrieve remote resources. This mode is not the default mode, but can be enabled by users who want to disable LibreOffice's ability to include remote resources within a document. A flaw existed where bullet graphics were omitted from this protection prior to version 6.2.5. This issue affects: Document Foundation LibreOffice versions prior to 6.2.5.
Affected (9)
Show all products
Configuration A
| Vulnerable Software | Affected Versions |
|---|---|
| Before 6.2.5 |
Configuration B
| Vulnerable Software | Affected Versions |
|---|---|
| Version 16.04 |
Configuration C
| Vulnerable Software | Affected Versions |
|---|---|
| Version 29 |
Configuration D
| Vulnerable Software | Affected Versions |
|---|---|
| Version 8.0 |
References (18)
Source: security@documentfoundation.org
Mailing ListThird Party Advisory
Source: security@documentfoundation.org
Mailing ListThird Party Advisory
Source: security@documentfoundation.org
Mailing ListThird Party Advisory
Source: security@documentfoundation.org
Source: security@documentfoundation.org
Source: security@documentfoundation.org
Third Party Advisory
Source: security@documentfoundation.org
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Mailing ListThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Mailing ListThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Mailing ListThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Timeline
No history available yet.