Cpe:2.3:a:the_document_foundation:libreoffice:*:*:*:*:*:*:*:* - CraftedSignal Threat Feedhttps://feed.craftedsignal.io/cpes/cpe2.3athe_document_foundationlibreoffice/Trending threats, MITRE ATT&CK coverage, and detection metadata. Fed continuously.Hugoenhello@craftedsignal.iohello@craftedsignal.ioWed, 09 Sep 2026 12:54:48 +0000https://feed.craftedsignal.io/favicon-32x32.pngCraftedSignal Threat Feedhttps://feed.craftedsignal.io/3232https://feed.craftedsignal.io/favicon.svgArbitrary File Creation Vulnerability in LibreOfficehttps://feed.craftedsignal.io/briefs/2026-09-libreoffice-file-creation/Wed, 09 Sep 2026 12:54:48 +0000hello@craftedsignal.iohttps://feed.craftedsignal.io/briefs/2026-09-libreoffice-file-creation/A vulnerability in LibreOffice (CVE-2024-7737) allows a remote attacker to create arbitrary files on a user's system by exploiting improper document feature handling.A vulnerability identified as CVE-2024-7737 exists in LibreOffice versions prior to 24.2.6. The flaw is caused by the improper handling of specific document features within the software, which may allow an unauthenticated remote attacker to create arbitrary files on a victim's local system when a maliciously crafted document is opened. This vulnerability poses a risk of unauthorized file system write operations. Users are advised to upgrade to the latest stable version of LibreOffice to mitigate this risk.

Impact

Successful exploitation allows for unauthorized file creation on the targeted host. Depending on the location and contents of the generated files, this could facilitate further malicious activities such as the overwriting of system configuration files, the placement of files in startup directories, or the creation of local execution artifacts. The vulnerability affects users on Windows, Linux, and macOS platforms.

Recommendation

Update all LibreOffice installations to version 24.2.6 or later to address the vulnerability documented in CVE-2024-7737.

]]>mediumadvisory