CVE-2024-3044

2024-05-1421:15:12

CWE-356

Document Fdn.

web.nvd.nist.gov

cve-2024-3044

unchecked script

graphic on-click binding

libreoffice

script execution

nvd

attacker

document

prompt

AI Score

6.2

Confidence

Low

EPSS

Percentile

15.5%

JSON

Unchecked script execution in Graphic on-click binding in affected LibreOffice versions allows an attacker to create a document which without prompt will execute scripts built-into LibreOffice on clicking a graphic. Such scripts were previously deemed trusted but are now deemed untrusted.

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "product": "LibreOffice",
    "vendor": "The Document Foundation",
    "versions": [
      {
        "lessThan": "7.6.7",
        "status": "affected",
        "version": "7.6",
        "versionType": "7.6 series"
      },
      {
        "lessThan": "24.2.3",
        "status": "affected",
        "version": "24.2",
        "versionType": "24.2 series"
      }
    ]
  }
]