CVE-2023-6185

CVSS 3.1 Score 8.8 of 10 (high)

Details

Published Dec 11, 2023
Updated: Dec 31, 2023

Summary

CVE-2023-6185 is an Input Validation vulnerability affecting the GStreamer integration in LibreOffice by The Document Foundation. This issue permits an attacker to execute arbitrary GStreamer plugins by exploiting insufficient escaping of the embedded video filename. The vulnerability allows attackers to run plugins based on the target system's installed plugins.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share

Affected Products

  • Debian
  • Fedora Operating System
  • LibreOffice

Affected Vendors

  • Debian
  • The Document Foundation
  • Fedora Project

Advisories, Assessments, and Mitigations