CVE-2024-3044

2024-05-1421:15:12

Alpine Linux Development Team

security.alpinelinux.org

cve-2024-3044

unchecked script execution

libreoffice

graphic on-click binding

document security

unix

6.4 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

15.7%

JSON

Unchecked script execution in Graphic on-click binding in affected LibreOffice versions allows an attacker to create a document which without prompt will execute scripts built-into LibreOffice on clicking a graphic. Such scripts were previously deemed trusted but are now deemed untrusted.

OSVersionArchitecturePackageVersionFilename
Alpineedge-communitynoarchlibreoffice< 7.6.7.2-r0UNKNOWN
Alpine3.19-communitynoarchlibreoffice< 7.6.7.2-r0UNKNOWN
Alpine3.20-communitynoarchlibreoffice< 7.6.7.2-r0UNKNOWN

OS	Version	Architecture	Package	Version	Filename
Alpine	edge-community	noarch	libreoffice	< 7.6.7.2-r0	UNKNOWN
Alpine	3.19-community	noarch	libreoffice	< 7.6.7.2-r0	UNKNOWN
Alpine	3.20-community	noarch	libreoffice	< 7.6.7.2-r0	UNKNOWN