CVEvulnerability

CVE-2024-3044

6.5 MEDIUM Published 2024-05-14 Modified 2026-06-17 Official page ↗
Status
Analyzed
Published
2024-05-14
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
6.5 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L
CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0)
6.5 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L
Weaknesses
CWE-356, CWE-94

Description

Unchecked script execution in Graphic on-click binding in affected LibreOffice versions allows an attacker to create a document which without prompt will execute scripts built-into LibreOffice on clicking a graphic. Such scripts were previously deemed trusted but are now deemed untrusted.

Affected configurations

• libreoffice libreoffice (< 7.6.7.1) • libreoffice libreoffice (>= 24.2.0.0 < 24.2.3.1) • fedoraproject fedora 39 • debian debian linux 10.0

Related

Weakness · CWE (2)

  • CWE-356 Missing User Interaction for Potentially Unsafe Action weakness
  • CWE-94 Improper Control of Generation of Code weakness

References