CVE-2017-3157

Name	CVE-2017-3157
Description	By exploiting the way Apache OpenOffice before 4.1.4 renders embedded objects, an attacker could craft a document that allows reading in a file from the user's filesystem. Information could be retrieved by the attacker by, e.g., using hidden sections to store the information, tricking the user into saving the document and convincing the user to send the document back to the attacker. The vulnerability is mitigated by the need for the attacker to know the precise file path in the target system, and the need to trick the user into saving the document and sending it back.
Source	CVE (at NVD; CERT, LWN, oss-sec, fulldisc, Red Hat, Ubuntu, Gentoo, SUSE bugzilla/CVE, GitHub advisories/code/issues, web search, more)
References	DLA-910-1, DSA-3792-1

Vulnerable and fixed packages

The table below lists information on source packages.

Source Package	Release	Version	Status
libreoffice (PTS)	jessie, jessie (lts)	1:4.3.3-2+deb8u15	fixed
	stretch (security)	1:5.2.7-1+deb9u11	fixed
	stretch (lts), stretch	1:6.1.5-3+deb9u5	fixed
	buster, buster (lts)	1:6.1.5-3+deb10u14	fixed
	buster (security)	1:6.1.5-3+deb10u12	fixed
	bullseye	1:7.0.4-4+deb11u10	fixed
	bullseye (security)	1:7.0.4-4+deb11u11	fixed
	bookworm (security), bookworm	4:7.4.7-1+deb12u5	fixed
	sid, trixie	4:24.8.3-1	fixed

The information below is based on the following data on fixed versions.

Package	Type	Release	Fixed Version	Origin
libreoffice	source	wheezy	1:3.5.4+dfsg2-0+deb7u9	DLA-910-1
libreoffice	source	jessie	1:4.3.3-2+deb8u6	DSA-3792-1
libreoffice	source	(unstable)	1:5.2.3-1

https://www.libreoffice.org/about-us/security/advisories/cve-2017-3157/