cbcvebase.
CVE-2017-3157
published 2017-11-20

CVE-2017-3157: By exploiting the way Apache OpenOffice before 4.1.4 renders embedded objects, an attacker could craft a document that allows reading in a file from the user's…

PriorityP426medium5.5CVSS 3.0
AVLACLPRNUIRSUCHINAN
EPSS
3.12%
86.4th percentile
By exploiting the way Apache OpenOffice before 4.1.4 renders embedded objects, an attacker could craft a document that allows reading in a file from the user's filesystem. Information could be retrieved by the attacker by, e.g., using hidden sections to store the information, tricking the user into saving the document and convincing the user to send the document back to the attacker. The vulnerability is mitigated by the need for the attacker to know the precise file path in the target system, and the need to trick the user into saving the document and sending it back.

Affected

24 ranges
VendorProductVersion rangeFixed in
apacheopenoffice<= 4.1.3
apache_software_foundationapache_openoffice
debiandebian_linux
debiandebian_linux
debianlibreoffice< libreoffice 1:5.2.3-1 (bookworm)libreoffice 1:5.2.3-1 (bookworm)
libreofficelibreoffice>= 0 < 1:5.2.3-11:5.2.3-1
libreofficelibreoffice>= 0 < 1:5.2.3-11:5.2.3-1
libreofficelibreoffice>= 0 < 1:5.2.3-11:5.2.3-1
libreofficelibreoffice>= 0 < 1:5.2.3-11:5.2.3-1
redhatenterprise_linux_desktop
redhatenterprise_linux_desktop
redhatenterprise_linux_server
redhatenterprise_linux_server
redhatenterprise_linux_server_aus
redhatenterprise_linux_server_aus
redhatenterprise_linux_server_aus
redhatenterprise_linux_server_eus
redhatenterprise_linux_server_eus
redhatenterprise_linux_server_eus
redhatenterprise_linux_server_eus
redhatenterprise_linux_server_tus
redhatenterprise_linux_server_tus
redhatenterprise_linux_workstation
redhatenterprise_linux_workstation

CVSS provenance

nvdv3.05.5MEDIUMCVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
nvdv2.04.3MEDIUMAV:N/AC:M/Au:N/C:P/I:N/A:N
osv5.5MEDIUM
vendor_debian5.5MEDIUM
vendor_redhat5.5MEDIUM
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.