Risultati di ClamAV in Debian 9: LibreOfficeMacros e PUA.Win.Exploit.CVE_2012_0110-1 - falsi positivi?

2

Sto eseguendo un Debian 9.1 installato di recente con KDE e una scansione di ClamAV mi dà questi risultati:

/usr/lib/libreoffice/share/extensions/wiki-publisher/WikiEditor/Module1.xba      PUA.Doc.Tool.LibreOfficeMacro-2     
/usr/lib/libreoffice/share/basic/Template/ModuleAgenda.xba                       PUA.Doc.Tool.LibreOfficeMacro-2     
/usr/lib/libreoffice/share/basic/Tools/Listbox.xba                               PUA.Doc.Tool.LibreOfficeMacro-2     
/usr/lib/libreoffice/share/basic/ImportWizard/Main.xba                           PUA.Doc.Tool.LibreOfficeMacro-2     
/usr/lib/libreoffice/share/basic/ImportWizard/Language.xba                       PUA.Doc.Tool.LibreOfficeMacro-2     
/usr/lib/libreoffice/share/basic/ImportWizard/API.xba                            PUA.Doc.Tool.LibreOfficeMacro-2     
/usr/lib/libreoffice/share/basic/ImportWizard/FilesModul.xba                     PUA.Doc.Tool.LibreOfficeMacro-2     
/usr/lib/libreoffice/share/basic/ImportWizard/DialogModul.xba                    PUA.Doc.Tool.LibreOfficeMacro-2     
/usr/lib/libreoffice/share/basic/FormWizard/Language.xba                         PUA.Doc.Tool.LibreOfficeMacro-2     
/usr/lib/libreoffice/share/basic/FormWizard/FormWizard.xba                       PUA.Doc.Tool.LibreOfficeMacro-2     
/usr/lib/libreoffice/share/basic/FormWizard/tools.xba                            PUA.Doc.Tool.LibreOfficeMacro-2     
/usr/lib/libreoffice/share/basic/FormWizard/develop.xba                          PUA.Doc.Tool.LibreOfficeMacro-2     
/usr/lib/libreoffice/share/basic/Template/Autotext.xba                           PUA.Doc.Tool.LibreOfficeMacro-2     
/usr/lib/libreoffice/share/basic/FormWizard/Layouter.xba                         PUA.Doc.Tool.LibreOfficeMacro-2     
/usr/lib/libreoffice/share/basic/FormWizard/DBMeta.xba                           PUA.Doc.Tool.LibreOfficeMacro-2     
/usr/lib/libreoffice/share/basic/Euro/ConvertRun.xba                             PUA.Doc.Tool.LibreOfficeMacro-2     
/usr/lib/libreoffice/share/basic/Euro/Protect.xba                                PUA.Doc.Tool.LibreOfficeMacro-2     
/usr/lib/libreoffice/share/basic/Euro/Init.xba                                   PUA.Doc.Tool.LibreOfficeMacro-2     
/usr/lib/libreoffice/share/basic/Euro/Common.xba                                 PUA.Doc.Tool.LibreOfficeMacro-2     
/usr/lib/libreoffice/share/basic/Euro/Hard.xba                                   PUA.Doc.Tool.LibreOfficeMacro-2     
/usr/lib/libreoffice/share/basic/Euro/Soft.xba                                   PUA.Doc.Tool.LibreOfficeMacro-2     
/usr/lib/libreoffice/share/basic/Euro/Writer.xba                                 PUA.Doc.Tool.LibreOfficeMacro-2     
/usr/lib/libreoffice/share/basic/Euro/AutoPilotRun.xba                           PUA.Doc.Tool.LibreOfficeMacro-2     
/usr/lib/libreoffice/share/basic/Template/Samples.xba                            PUA.Doc.Tool.LibreOfficeMacro-2     
/usr/lib/libreoffice/share/basic/Depot/Lang_zh.xba                               PUA.Doc.Tool.LibreOfficeMacro-2     
/usr/lib/libreoffice/share/basic/Depot/Lang_tw.xba                               PUA.Doc.Tool.LibreOfficeMacro-2     
/usr/lib/libreoffice/share/basic/Depot/Lang_ja.xba                               PUA.Doc.Tool.LibreOfficeMacro-2     
/usr/lib/libreoffice/share/basic/Depot/Lang_en.xba                               PUA.Doc.Tool.LibreOfficeMacro-2     
/usr/lib/libreoffice/share/basic/Depot/Lang_ko.xba                               PUA.Doc.Tool.LibreOfficeMacro-2     
/usr/lib/libreoffice/share/basic/Depot/Internet.xba                              PUA.Doc.Tool.LibreOfficeMacro-2     
/usr/lib/libreoffice/share/basic/Depot/Lang_de.xba                               PUA.Doc.Tool.LibreOfficeMacro-2     
/usr/lib/libreoffice/share/basic/Depot/Lang_it.xba                               PUA.Doc.Tool.LibreOfficeMacro-2     
/usr/lib/libreoffice/share/basic/Depot/Currency.xba                              PUA.Doc.Tool.LibreOfficeMacro-2     
/usr/lib/libreoffice/share/basic/Depot/CommonLang.xba                            PUA.Doc.Tool.LibreOfficeMacro-2     
/usr/lib/libreoffice/share/basic/Template/Correspondence.xba                     PUA.Doc.Tool.LibreOfficeMacro-2     
/usr/lib/libreoffice/share/basic/Depot/tools.xba                                 PUA.Doc.Tool.LibreOfficeMacro-2     
/usr/lib/libreoffice/share/basic/Depot/Lang_es.xba                               PUA.Doc.Tool.LibreOfficeMacro-2     
/usr/lib/libreoffice/share/basic/Depot/Lang_sv.xba                               PUA.Doc.Tool.LibreOfficeMacro-2     
/usr/lib/libreoffice/share/basic/Depot/Lang_fr.xba                               PUA.Doc.Tool.LibreOfficeMacro-2     
/usr/lib/libreoffice/share/basic/Depot/Depot.xba                                 PUA.Doc.Tool.LibreOfficeMacro-2     
/usr/lib/libreoffice/share/basic/Tutorials/RoadMap.xba                           PUA.Doc.Tool.LibreOfficeMacro-2     
/usr/lib/libreoffice/share/basic/Tutorials/TutorialClose.xba                     PUA.Doc.Tool.LibreOfficeMacro-2     
/usr/lib/libreoffice/share/basic/Tutorials/TutorialCreator.xba                   PUA.Doc.Tool.LibreOfficeMacro-2     
/usr/lib/libreoffice/share/basic/Tutorials/ShowInfoDialog.xba                    PUA.Doc.Tool.LibreOfficeMacro-2     
/usr/lib/libreoffice/share/basic/Tutorials/TutorialOpen.xba                      PUA.Doc.Tool.LibreOfficeMacro-2     
/usr/lib/libreoffice/share/basic/Tools/ModuleControls.xba                        PUA.Doc.Tool.LibreOfficeMacro-2     
/usr/lib/libreoffice/share/basic/Tutorials/Functions.xba                         PUA.Doc.Tool.LibreOfficeMacro-2     
/usr/lib/libreoffice/share/basic/Gimmicks/AutoText.xba                           PUA.Doc.Tool.LibreOfficeMacro-2     
/usr/lib/libreoffice/share/basic/Gimmicks/ReadDir.xba                            PUA.Doc.Tool.LibreOfficeMacro-2     
/usr/lib/libreoffice/share/basic/Gimmicks/GetTexts.xba                           PUA.Doc.Tool.LibreOfficeMacro-2     
/usr/lib/libreoffice/share/basic/Gimmicks/ChangeAllChars.xba                     PUA.Doc.Tool.LibreOfficeMacro-2     
/usr/lib/libreoffice/share/basic/Gimmicks/Userfields.xba                         PUA.Doc.Tool.LibreOfficeMacro-2     
/usr/lib/libreoffice/share/basic/Access2Base/Trace.xba                           PUA.Doc.Tool.LibreOfficeMacro-2     
/usr/lib/libreoffice/share/basic/Access2Base/Recordset.xba                       PUA.Doc.Tool.LibreOfficeMacro-2     
/usr/lib/libreoffice/share/basic/Access2Base/Field.xba                           PUA.Doc.Tool.LibreOfficeMacro-2     
/usr/lib/libreoffice/share/basic/Access2Base/L10N.xba                            PUA.Doc.Tool.LibreOfficeMacro-2     
/usr/lib/libreoffice/share/basic/Tools/Debug.xba                                 PUA.Doc.Tool.LibreOfficeMacro-2     
/usr/lib/libreoffice/share/basic/Access2Base/Database.xba                        PUA.Doc.Tool.LibreOfficeMacro-2     
/usr/lib/libreoffice/share/basic/Access2Base/Application.xba                     PUA.Doc.Tool.LibreOfficeMacro-2     
/usr/lib/libreoffice/share/basic/Access2Base/Utils.xba                           PUA.Doc.Tool.LibreOfficeMacro-2     
/usr/lib/libreoffice/share/basic/Access2Base/_License.xba                        PUA.Doc.Tool.LibreOfficeMacro-2     
/usr/lib/libreoffice/share/basic/Access2Base/Form.xba                            PUA.Doc.Tool.LibreOfficeMacro-2     
/usr/lib/libreoffice/share/basic/Access2Base/OptionGroup.xba                     PUA.Doc.Tool.LibreOfficeMacro-2     
/usr/lib/libreoffice/share/basic/Access2Base/CommandBar.xba                      PUA.Doc.Tool.LibreOfficeMacro-2     
/usr/lib/libreoffice/share/basic/Access2Base/PropertiesSet.xba                   PUA.Doc.Tool.LibreOfficeMacro-2     
/usr/lib/libreoffice/share/basic/Access2Base/Event.xba                           PUA.Doc.Tool.LibreOfficeMacro-2     
/usr/lib/libreoffice/share/basic/Access2Base/CommandBarControl.xba               PUA.Doc.Tool.LibreOfficeMacro-2     
/usr/lib/libreoffice/share/basic/Tools/Strings.xba                               PUA.Doc.Tool.LibreOfficeMacro-2     
/usr/lib/libreoffice/share/basic/Access2Base/DataDef.xba                         PUA.Doc.Tool.LibreOfficeMacro-2     
/usr/lib/libreoffice/share/basic/Access2Base/Control.xba                         PUA.Doc.Tool.LibreOfficeMacro-2     
/usr/lib/libreoffice/share/basic/Access2Base/acConstants.xba                     PUA.Doc.Tool.LibreOfficeMacro-2     
/usr/lib/libreoffice/share/basic/Access2Base/TempVar.xba                         PUA.Doc.Tool.LibreOfficeMacro-2     
/usr/lib/libreoffice/share/basic/Access2Base/Root_.xba                           PUA.Doc.Tool.LibreOfficeMacro-2     
/usr/lib/libreoffice/share/basic/Access2Base/UtilProperty.xba                    PUA.Doc.Tool.LibreOfficeMacro-2     
/usr/lib/libreoffice/share/basic/Access2Base/PropertiesGet.xba                   PUA.Doc.Tool.LibreOfficeMacro-2     
/usr/lib/libreoffice/share/basic/Access2Base/Test.xba                            PUA.Doc.Tool.LibreOfficeMacro-2     
/usr/lib/libreoffice/share/basic/Access2Base/SubForm.xba                         PUA.Doc.Tool.LibreOfficeMacro-2     
/usr/lib/libreoffice/share/basic/Access2Base/DoCmd.xba                           PUA.Doc.Tool.LibreOfficeMacro-2     
/usr/lib/libreoffice/share/basic/Tools/UCB.xba                                   PUA.Doc.Tool.LibreOfficeMacro-2     
/usr/lib/libreoffice/share/basic/Access2Base/Compatible.xba                      PUA.Doc.Tool.LibreOfficeMacro-2     
/usr/lib/libreoffice/share/basic/Access2Base/Property.xba                        PUA.Doc.Tool.LibreOfficeMacro-2     
/usr/lib/libreoffice/share/basic/Access2Base/Collect.xba                         PUA.Doc.Tool.LibreOfficeMacro-2     
/usr/lib/libreoffice/share/basic/Access2Base/Dialog.xba                          PUA.Doc.Tool.LibreOfficeMacro-2     
/usr/lib/libreoffice/share/basic/Access2Base/Methods.xba                         PUA.Doc.Tool.LibreOfficeMacro-2     
/usr/lib/libreoffice/presets/basic/Standard/Module1.xba                          PUA.Doc.Tool.LibreOfficeMacro-2     
/usr/share/mime/mime.cache                                                       PUA.Win.Exploit.CVE_2012_0110-1     
/usr/lib/libreoffice/share/basic/Tools/Misc.xba                                  PUA.Doc.Tool.LibreOfficeMacro-2     

Questi sono tutti falsi positivi? Come controllare meglio se sono? Anche altre persone stanno ottenendo questi risultati? Dovrei semplicemente rimuoverli o sono quei file necessari o utili?

Non ho installato alcuna estensione libreoffice da solo. Sembra che siano stati installati nell'installazione iniziale.

Qualcuno ha chiesto informazioni PUA.Win.Exploit.CVE_2012_0110-1 precedente. È sufficiente eseguire sudo update-mime-database /usr/share/mime/ per risolverlo?
L'ho fatto e ha restituito Unknown media type in type 'all/all' Unknown media type in type 'all/allfiles' e dopo un'altra scansione ha mostrato di nuovo lo stesso risultato.

Sono ancora nuovo in GNU / Linux e non sono sicuro che questa domanda sia più appropriata qui o su Unix & Linux Stack Exchange.

    
posta mYnDstrEAm 30.07.2017 - 21:25
fonte

1 risposta

1

Sto ottenendo esattamente la stessa cosa su Ubuntu. Sembrano essere un gruppo di macro incluse, inclusi tutorial. Se possibile, metti in quarantena e assicurati che LibreOffice funzioni.

Se hai bisogno di usare i macro più tardi o se la tua libre smette di funzionare, puoi ripristinare i file.

    
risposta data 21.12.2017 - 01:54
fonte

Leggi altre domande sui tag