[Libreoffice-bugs] [Bug 142696] New: Modification of embedded objects possible on read-only documents

[bugzilla-daemon at bugs.documentfoundation.org]

https://bugs.documentfoundation.org/show_bug.cgi?id=142696

            Bug ID: 142696
           Summary: Modification of embedded objects possible on read-only
                    documents
           Product: LibreOffice
           Version: unspecified
          Hardware: All
                OS: All
            Status: UNCONFIRMED
          Severity: normal
          Priority: medium
         Component: LibreOffice
          Assignee: libreoffice-bugs at lists.freedesktop.org
          Reporter: heiko.tietze at documentfoundation.org
                CC: caolanm at redhat.com, michael.meeks at collabora.com,
                    xiscofauli at libreoffice.org

The attachment 172653 contains a chart (embedded OLE object) and despite the
document is read-only it is possible to start the chart module per double-click
and modify the object. I wonder if this is a security/safety risk.

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.freedesktop.org/archives/libreoffice-bugs/attachments/20210607/c12533eb/attachment-0001.htm>