![]() One of the earlier challenges for the team was to clean the code that they acquired from OpenOffice before making it run well on mobile devices. In some circumstances Kaspersky suspects that malware was once delivered by the use of a Telegram workforce hooked up to a faux web page. As such the ability to spoof those signatures could easily open the floodgates allowing attackers to do untold harm to any business using either Libre- or OpenOffice. ![]() Meeks gave me a demo of LibreOffice running on Android at FOSDEM back in 2012. Researchers discovered multiple one-click vulnerabilities across a variety of popular software applications, allowing an attacker to potentially execute. The difference between LibreOffice Vanilla and upstream LibreOffice is the addition of a small and easy to dismiss nag dialog that encourages people to support TDF (since they miss the TDF download page that does this), and also tells people about LfC.” What about mobile? For those who don’t know LibreOffice is a fork of OpenOffice. The OpenOffice flaw is being tracked as CVE-2021-41832 and the LibreOffice flaw is being tracked as CVE-2021-25635. ![]() ![]() While it’s clearly understood that the paid version is aimed at enterprise customers and comes with support, I was left wondering what the differences are between the Vanilla LO and the one available directly from TDF? Meeks explained: “This is similar to the difference between a RHEL kernel and an upstream Linux kernel: it’s a matter of taste, base version, cumulative fixes and of course the availability of long term support. As such the ability to spoof those signatures could easily open the floodgates allowing attackers to do untold harm to any business using either Libre- or OpenOffice. There are now three versions of LibreOffice out there: LibreOffice that’s offered by TDF for direct download, LibreOffice by Collabora, and LibreOffice Vanilla. LibreOffice and OpenOffice have pushed updates to address a vulnerability that makes it possible for an attacker to manipulate documents to appear as signed by a. ![]()
0 Comments
Leave a Reply. |
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |