#LIBREOFFICE OPENOFFICE BUG ALLOWS HACKERS SPOOF INSTALL#

Since the flaw is unpatched, users are recommended to install LibreOffice without macros or exclude installing LibreLogo. LibreOffice, OpenOffice bug allows hackers to spoof signed docs.

#LIBREOFFICE OPENOFFICE BUG ALLOWS HACKERS SPOOF CODE#

The big problem here is that the code in not translated well and just supplying python code as the script code often results in the same code after translation,” said Emmerich. “To move the turtle, LibreLogo executes custom script code that is internally translated to python code and executed.

#LIBREOFFICE OPENOFFICE BUG ALLOWS HACKERS SPOOF PATCH#

LibreOffice is currently working towards a patch for this flaw.Įmmerich explains that the flaw resulted due to faulty code in LibreLogo. However, another security expert Alex found that the fix could be bypassed.

The bug was fixed in LibreOffice version 6.2.5.

Furthermore, Emmerich suggests that this bug can be exploited with OnFocus events and forms that could directly execute the link in the document once opened without needing a mouseover.

The link is executed once the mouse pointer is placed over it.

The PoC by the researcher indicates how a link inside a document is opened without clicking on the link through a code written in Python.

This component is a programming interface that uses turtle vector graphics.

Tracked as CVE-2019-9848, the flaw stems from a LibreOffice component called LibreLogo.

In a blog post, Emmerich demonstrates the exploitation of the flaw with a proof-of-concept (PoC).

The flaw was discovered by security researcher Nils Emmerich of ERNW. It could be exploited through a malicious document containing a macro that is opened with LibreOffice. The flaw could allow anyone to execute arbitrary Python commands through the application. LibreOffice, a popular open-source office suite application contains a major code execution flaw in the software.

It can be exploited with a weaponized document with macros when opened with LibreOffice.

The bug is a remote code execution flaw where arbitrary Python commands could be executed in the background.

In order to set macro security on LibreOffice, go to Tools → Options → LibreOffice → Security, and click on ‘Macro Security’.Īs we can see in the picture below, in the new window, the users can choose from four different levels of protection, with High or Very High being the suggested options.Īs recommended by BleepingComputer, users having an outdated and vulnerable version of the app shouldn’t count on the “trusted list” feature because a compromised document could still seem to come from a reputable source if the signature algorithm is incorrect.

#LIBREOFFICE OPENOFFICE BUG ALLOWS HACKERS SPOOF UPDATE#

Those who can’t update to the newest version can always disable the macro features in their office suite or avoid trusting any documents that contain macros. Those using Linux who don’t have the versions mentioned above available on their distribution’s package manager yet are urged to download the “deb”, or “rpm” package from the Download center or build LibreOffice from source. Users will have to do the updates manually by downloading the newest version from the LibreOffice, OpenOffice download centers, as neither LibreOffice nor OpenOffice apps provide auto-updating. For LibreOffice – 7.0.5 or 7.1.1 and later.Those using at least one of the open-source office suites are recommended to update to the most recent version as quickly as possible. The same issue affects LibreOffice, a project fork of OpenOffice that originated from the main project over ten years ago and is recorded as CVE-2021-25635 for their project. Ruhr University Bochum’s cybersecurity researchers were the first to notice this vulnerability in OpenOffice, which has been tracked as CVE-2021-41832. The digital signatures used in document macros are intended to assist the user in determining whether or not a document has been modified and can be trustworthy.Īllowing anyone to sign macro-ridden documents themselves, and make them appear as trustworthy, is an excellent way to trick users into running malicious code. LibreOffice and OpenOffice have released fixes to tackle an issue that allows hackers to make documents look as if they were signed by a trustworthy source.Įven though the vulnerability is not placed in the ‘High’ severity category being rated as moderate, the consequences could be disastrous.

Libreoffice openoffice bug allows hackers spoof