Bug 787959 (CVE-2021-25631)

Summary:	app-office/libreoffice{-,bin}: Extension deny list bypass for execution of untrusted files (CVE-2021-25631)
Product:	Gentoo Security	Reporter:	Sam James <sam>
Component:	Vulnerabilities	Assignee:	Gentoo Security <security>
Status:	RESOLVED INVALID
Severity:	normal	CC:	office
Priority:	Normal
Version:	unspecified
Hardware:	All
OS:	Linux
Whiteboard:
Package list:		Runtime testing required:	---

Description Sam James archtester

2021-05-03 18:54:54 UTC

Description:
"In the LibreOffice 7-1 series in versions prior to 7.1.2, and in the 7-0 series in versions prior to 7.0.5, the denylist can be circumvented by manipulating the link so it doesn't match the denylist but results in ShellExecute attempting to launch an executable type."

Not clear if 6.x is vulnerable?

Comment 1 Andreas Sturmlechner gentoo-dev

2021-05-04 08:25:04 UTC

Hard to tell. I can't find any information about it in git.

Comment 2 Sam James archtester

2021-05-05 00:14:58 UTC

Oh, we both missed it is Windows only (I should have clocked from the ShellExecute): https://www.libreoffice.org/about-us/security/advisories/cve-2021-25631/.

All good.