{"vulnerability": "cve-2019-9851", "sightings": [{"uuid": "dab54d18-bd25-40f1-9ec2-ef0a87cdc7dc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-9851", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-06T03:13:44.000000Z"}, {"uuid": "562e5424-4932-44c2-8d43-8e7309addebf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-9851", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-23T04:10:20.000000Z"}, {"uuid": "6f3aa635-bd19-453c-9b31-8874906809a9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-9851", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/fileformat/libreoffice_logo_exec.rb", "content": "", "creation_timestamp": "2019-08-19T18:44:59.000000Z"}, {"uuid": "9bbaddfd-63a2-4546-87a6-84519cae2968", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-9851", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/fileformat/libreoffice_logo_exec.rb", "content": "{\"aliases\": [], \"arch\": \"python\", \"author\": [\"Nils Emmerich\", \"Shelby Pace\", \"LoadLow\", \"Gabriel Masei\"], \"autofilter_ports\": [], \"autofilter_services\": [], \"check\": false, \"default_credential\": false, \"description\": \"LibreOffice comes bundled with sample macros written in Python and\\n          allows the ability to bind program events to them.\\n\\n          LibreLogo is a macro that allows a program event to execute text as Python code, allowing RCE.\\n\\n          This module generates an ODT file with a dom loaded event that,\\n          when triggered, will execute arbitrary python code and the metasploit payload.\", \"disclosure_date\": \"2019-07-16\", \"fullname\": \"exploit/multi/fileformat/libreoffice_logo_exec\", \"is_install_path\": true, \"mod_time\": \"2025-06-23 12:43:46 +0000\", \"name\": \"LibreOffice Macro Python Code Execution\", \"needs_cleanup\": null, \"notes\": {\"Reliability\": [\"unknown-reliability\"], \"SideEffects\": [\"unknown-side-effects\"], \"Stability\": [\"unknown-stability\"]}, \"path\": \"/modules/exploits/multi/fileformat/libreoffice_logo_exec.rb\", \"platform\": \"Python\", \"post_auth\": false, \"rank\": 300, \"ref_name\": \"multi/fileformat/libreoffice_logo_exec\", \"references\": [\"CVE-2019-9851\", \"URL-https://www.libreoffice.org/about-us/security/advisories/cve-2019-9848/\", \"URL-https://www.libreoffice.org/about-us/security/advisories/cve-2019-9851/\", \"URL-https://insinuator.net/2019/07/libreoffice-a-python-interpreter-code-execution-vulnerability-cve-2019-9848/\"], \"rport\": null, \"session_types\": false, \"targets\": [\"Automatic\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:49:39.075929Z"}]}