CVE-2018-14939 The get_app_path function in desktop/unx/source/start.c in LibreOffice through 6.0.5 mishandles the realpath function in certain environments such as FreeBSD libc, which might allow attackers to cause...
CriticalCVSS 9.8
EPSS 2.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The get_app_path function in desktop/unx/source/start.c in LibreOffice through 6.0.5 mishandles the realpath function in certain environments such as FreeBSD libc, which might allow attackers to cause a denial of service (buffer overflow and application crash) or possibly have unspecified other impact if LibreOffice is automatically launched during web browsing with pathnames controlled by a remote web site.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| libreoffice | <= 6.0.5 | No fix listed |
References
- 105047 third-party-advisory vdb-entry
- bugs.documentfoundation.org third-party-advisory
- Debian Security Tracker CVE-2018-14939 vendor-advisory