https://bugs.documentfoundation.org/show_bug.cgi?id=114878
--- Comment #2 from Mike Kaganski <[email protected]> ---
Actually, this is not a "remote" code execution. And this doesn't differ from
any other spreadsheet file being opened in a spreadsheet application, where
formulas can appear. If you use XLS, or ODS, or anything, there are formulas,
and they may do all the same kind of things. The only difference here is that
it's not a widespread knowledge that CSV files can contain that, too, despite
the RFC says otherwise.
RFC is great, but current state (with billions of existing files that require
to keep working) is the de-facto standard. And that isn't gonna change. The
only things required (not here, but universally) is amendment to the RFC that
makes it up-to-date, and wide informing.
--
You are receiving this mail because:
You are the assignee for the bug.
_______________________________________________
Libreoffice-bugs mailing list
[email protected]
https://lists.freedesktop.org/mailman/listinfo/libreoffice-bugs
