https://insinuator.net/tags/libreoffice/ Recent content in LibreOffice on Insinuator.net - Bold Statements Hugo en-us Fri, 26 Jul 2019 00:00:00 +0000 https://insinuator.net/2019/07/libreoffice-a-python-interpreter-code-execution-vulnerability-cve-2019-9848/ Fri, 26 Jul 2019 00:00:00 +0000 https://insinuator.net/2019/07/libreoffice-a-python-interpreter-code-execution-vulnerability-cve-2019-9848/ <p>While waiting for a download to complete, I stumbled across an interesting <a href="https://insert-script.blogspot.com/2019/02/libreoffice-cve-2018-16858-remote-code.html">blogpost</a>. The author describes a flaw in LibreOffice that allowed an attacker to execute code. Since this was quite recent, I was interested if my version is vulnerable to this attack and how they fixed it. Thus, I looked at the sources and luckily it was fixed. What I didn’t know before however was, that macros shipped with LibreOffice are executed without prompting the user, even on the highest macro security setting. So, if there would be a system macro from LibreOffice with a bug that allows to execute code, the user would not even get a prompt and the code would be executed right away. Therefor, I started to have a closer look at the source code and found out that exactly this is the case!</p>