CVE-2023-6185

Name of the Vulnerable Software and Affected Versions LibreOffice (affected versions not specified)

Description The issue is related to improper input validation in the GStreamer integration of LibreOffice, allowing an attacker to execute arbitrary GStreamer plugins. In affected versions, the filename of the embedded video is not sufficiently escaped when passed to GStreamer, enabling an attacker to run arbitrary gstreamer plugins depending on what plugins are installed on the target system.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.