[Libreoffice-bugs] [Bug 122379] windows defender detects Trojan:Win32/Spursint.F!cl in LibreOffice_6.1.4_Win_x64_helppack_fr.msi

[bugzilla-daemon at bugs.documentfoundation.org]

https://bugs.documentfoundation.org/show_bug.cgi?id=122379

V Stuart Foote <vstuart.foote at utsa.edu> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |cloph at documentfoundation.or
                   |                            |g,
                   |                            |xiscofauli at libreoffice.org
             Status|NEEDINFO                    |NEW
           Keywords|                            |security

--- Comment #3 from V Stuart Foote <vstuart.foote at utsa.edu> ---

OK, confirmed. Using the mirror indicated.  Overriding the Edge download, a
local Windows Defender AV scan hits on Win32/Spursint.F!cl and then deletes the
installer package before I can check HASH.

identifies this path in the package:

file:
C:\Users\vsfoote\Downloads\LibreOffice_6.1.4_Win_x64_helppack_fr.msi->libreoffice1.cab->bookmarks.js

Download same MSI directly from projectarchive and it scans clean and matches
HASH.

Email sent to officesecurity at lists.freedesktop.org

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.freedesktop.org/archives/libreoffice-bugs/attachments/20190101/e9481c7f/attachment.html>