Unchecked script execution in Graphic on-click binding in affected LibreOffice versions allows an attacker to create a document which without prompt will execute scripts built-into LibreOffice on clicking a graphic. Such scripts were previously deemed trusted but are now deemed untrusted.
References
Configurations
No configuration.
History
21 Nov 2024, 09:28
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://lists.debian.org/debian-lts-announce/2024/05/msg00016.html - | |
| References | () https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/3TU3TYDXICKPYHMCNL7ARYYBXACEAYJ4/ - | |
| References | () https://www.libreoffice.org/about-us/security/advisories/CVE-2024-3044 - |
12 Nov 2024, 21:35
| Type | Values Removed | Values Added |
|---|---|---|
| CWE | CWE-94 | |
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 6.5 |
20 Sep 2024, 10:15
| Type | Values Removed | Values Added |
|---|---|---|
| Summary | (en) Unchecked script execution in Graphic on-click binding in affected LibreOffice versions allows an attacker to create a document which without prompt will execute scripts built-into LibreOffice on clicking a graphic. Such scripts were previously deemed trusted but are now deemed untrusted. | |
| CWE | CWE-356 |
10 Jun 2024, 17:16
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
15 May 2024, 16:40
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2024-05-14 21:15
Updated : 2024-11-21 09:28
NVD link : CVE-2024-3044
Mitre link : CVE-2024-3044
CVE.ORG link : CVE-2024-3044
JSON object : View
Products Affected
No product.