Bug 155482 - Exploit payload process
Summary: Exploit payload process
Status: CLOSED FIXED
Alias: None
Product: LibreOffice
Classification: Unclassified
Component: LibreOffice (show other bugs)
Version:
(earliest affected)
7.5.3.2 release
Hardware: x86-64 (AMD64) Windows (All)
: medium normal
Assignee: Not Assigned
URL: https://ask.libreoffice.org/t/exploit...
Whiteboard:
Keywords:
Depends on:
Blocks:
 
Reported: 2023-05-25 09:24 UTC by Pedro
Modified: 2023-06-03 23:11 UTC (History)
1 user (show)

See Also:
Crash report or crash signature:


Attachments
See above. (49.76 KB, image/jpeg)
2023-05-25 09:24 UTC, Pedro
Details

Note You need to log in before you can comment on or make changes to this bug.
Description Pedro 2023-05-25 09:24:44 UTC
Created attachment 187488 [details]
See above.

Hi. I installed twice the new version of "LibreOffice_7.5.3_Win_x86-64.msi" and every time Malwarebytes tells me that there is an Exploit payload process and crashes.

I thought it was only with Writer but it also happens to me with Draw, Base, LibreOffice, etc, etc. All when I choose one of your programs to open a doc I created (I sent it to the internet in an email and downloaded it to my pc) as I always do. 

To change the original download, I went and chose one (I don't remember which one) from "I found 6 mirrors that handle this country (US)" and the same thing happened.

How does the file get infected when I download it?

P.
Comment 1 Stéphane Guillou (stragu) 2023-05-25 11:26:30 UTC
Are you the person who asked on Ask.LO ? https://ask.libreoffice.org/t/exploit-payload-process-in-libre-office-file/91808

Have you looked on MalwareBytes' side? It looks likely to be a false-positive on their side.
https://ask.libreoffice.org/t/exploit-payload-process-in-libre-office-file/91808/3

You can whitelist applications or files: https://support.malwarebytes.com/hc/en-us/articles/360038479234-Exclude-detections-in-Malwarebytes-for-Windows

You can ask Malwarebytes to confirm it is a false positive: https://support.malwarebytes.com/hc/en-us/articles/360038524154-Report-a-false-positive-to-Malwarebytes-Support