The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2017:1975 advisory.

    LibreOffice is an open source, community-developed office productivity suite. It includes key desktop     applications, such as a word processor, a spreadsheet, a presentation manager, a formula editor, and a     drawing program. LibreOffice replaces OpenOffice and provides a similar but enhanced and extended office     suite.

    Security Fix(es):

    * An out-of-bounds write flaw was found in the way Libreoffice rendered certain documents containing     Polygon images. By tricking a user into opening a specially crafted LibreOffice file, an attacker could     possibly use this flaw to execute arbitrary code with the privileges of the user opening the file.
    (CVE-2017-7870)

    Additional Changes:

    For detailed information on changes in this release, see the Red Hat Enterprise Linux 7.4 Release Notes     linked from the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

Detections

Analytics

RHEL 7 : libreoffice (RHSA-2017:1975)

critical Nessus Plugin ID 102107

Version 3.14