Exploitation Summary
EIP tracks 6 public exploits for CVE-2018-16858.
PoCs published by Metasploit, 4nimanegra, Henryisnotavailable, including Metasploit module exploits/multi/fileformat/libreoffice_macro_exec.
AI-analyzed exploit summary This Metasploit module exploits CVE-2018-16858, a directory traversal vulnerability in LibreOffice that allows arbitrary code execution via malicious ODT files. It generates an ODT file with a mouse-over event triggering a Python script execution through a path traversal flaw.
Description
It was found that libreoffice before versions 6.0.7 and 6.1.3 was vulnerable to a directory traversal attack which could be used to execute arbitrary macros bundled with a document. An attacker could craft a document, which when opened by LibreOffice, would execute a Python method from a script in any arbitrary file system location, specified relative to the LibreOffice install location.
Exploits (6)
This Metasploit module exploits CVE-2018-16858, a directory traversal vulnerability in LibreOffice that allows arbitrary code execution via malicious ODT files. It generates an ODT file with a mouse-over event triggering a Python script execution through a path traversal flaw.
This repository provides a detailed writeup and proof-of-concept exploit for CVE-2018-16858, a vulnerability in LibreOffice that allows arbitrary Python code execution via maliciously crafted ODT files. The exploit leverages directory traversal in hyperlink event handlers to execute Python scripts without user warning.
This Python script generates a malicious FODT file to exploit CVE-2018-16858, a remote code execution vulnerability in LibreOffice. It embeds a crafted link and command into the document, which executes when opened.
This repository contains a Python script designed to detect exploitation attempts of CVE-2018-16858 by monitoring network traffic for specific signatures and payloads. It analyzes captured packets to identify potential attackers and their targets.
This repository contains a Python script designed to detect exploitation attempts of CVE-2018-16858 by monitoring network traffic for specific signatures and extracting attacker IP/port from shellcode. It does not exploit the vulnerability but analyzes traffic for signs of exploitation.
This Metasploit module exploits CVE-2018-16858 in LibreOffice by generating a malicious ODT file that leverages a directory traversal vulnerability to execute arbitrary Python code via a mouse-over event, leading to RCE.
References (8)
Scores
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H