Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

CVE-2018-10583

EPSS 71.89% · P99

Public Exploits 2

ExploitDB · 1 EDB-44564 [local]
Metasploit · 1 odt_badodt.rb [auxiliary]
Get alerts for future matching vulnerabilitiesLog in to subscribe

I. Basic Information for CVE-2018-10583

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
An information disclosure vulnerability occurs when LibreOffice 6.0.3 and Apache OpenOffice Writer 4.1.5 automatically process and initiate an SMB connection embedded in a malicious file, as demonstrated by xlink:href=file://192.168.0.2/test.jpg within an office:document-content element in a .odt XML document.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
LibreOffice和Apache OpenOffice 信息泄露漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
LibreOffice和Apache OpenOffice都是开源的办公软件套件。该套件包含文本文档、电子表格、演示文稿、绘图、数据库等软件。前者由文档基金会（The Document Foundation，TDF）开发；后者由美国阿帕奇（Apache）软件基金会开发，OpenOffice Writer是其中的一个文档编辑软件。 LibreOffice 6.0.3版本和Apache OpenOffice Writer 4.1.5版本中存在信息泄露漏洞。攻击者可借助恶意的PDF文件利用该漏洞获取NTLM散列
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Shenlong Deep Dive — AI Deep Analysis

10-question deep dive: root cause, exploitation, mitigation, urgency. Read summary free, full version requires login.

Read summary Full analysis (login)

Affected Products

VendorProductAffected VersionsCPESubscribe
-n/a n/a -

II. Public POCs for CVE-2018-10583

#POC DescriptionSource LinkShenlong Link
1An information disclosure vulnerability occurs when LibreOffice 6.0.3 and Apache OpenOffice Writer 4.1.5 automatically process and initiate an SMB connection embedded in a malicious file, as demonstrated by "xlink:href=file://192.168.0.2/test.jpg" within an "office:document-content" element in a ".odt XML document".https://github.com/MrTaherAmine/CVE-2018-10583POC Details
2Update python3 exploit for CVE-2018-10583 (LibreOffice/Open Office - '.odt' Information Disclosure )https://github.com/octodi/CVE-2018-10583POC Details
AI-Generated POCPremium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2018-10583

请登录查看更多情报信息。

Same Patch Batch · n/a · 2018-05-01 · 24 CVEs total

CVE-2013-0159Fedora fedora-business-cards 后置链接漏洞
CVE-2018-10260HRSALE The Ultimate HRM 安全漏洞
CVE-2018-10259HRSALE The Ultimate HRM 跨站脚本漏洞
CVE-2018-10258Shopy Point of Sale 代码注入漏洞
CVE-2018-10257HRSALE The Ultimate HRM 代码注入漏洞
CVE-2018-10256HRSALE The Ultimate HRM SQL注入漏洞
CVE-2018-10255clustercoding Blog Master Pro 代码注入漏洞
CVE-2016-10036JFrog Artifactory 安全漏洞
CVE-2013-4209Red Hat Automatic Bug Reporting Tool 安全漏洞
CVE-2013-4201Katello 授权问题漏洞
CVE-2013-2049Red Hat CloudForms 2 Management Engine 安全漏洞
CVE-2013-0185Red Hat ManageIQ EVM 跨站请求伪造漏洞
CVE-2018-10371WordPress wunderfarm WF Cookie Consent插件跨站脚本漏洞
CVE-2018-9336OpenVPN 安全漏洞
CVE-2018-9232Gongjin Electronics T&W WIFI Repeater BE126 安全漏洞
CVE-2013-4040IBM Tivoli Application Dependency Discovery Manager for Unix 安全漏洞
CVE-2013-4035IBM Sterling Connect:Direct for OpenVMS 安全漏洞
CVE-2017-18264phpMyAdmin 安全漏洞
CVE-2018-8939Ipswitch WhatsUp Gold 安全漏洞
CVE-2018-8938Ipswitch WhatsUp Gold 代码注入漏洞

Showing top 20 of 24 CVEs. View all on vendor page → →

IV. Related Vulnerabilities

Same product: n/a
Same vendor: n/a

V. Comments for CVE-2018-10583

No comments yet

Leave a comment