CVE-2024-3044

2024-05-1421:15:12

Debian Security Bug Tracker

security-tracker.debian.org

cve-2024-3044

unchecked script execution

graphic on-click binding

libreoffice

unix

7.4 High

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

15.7%

JSON

Unchecked script execution in Graphic on-click binding in affected LibreOffice versions allows an attacker to create a document which without prompt will execute scripts built-into LibreOffice on clicking a graphic. Such scripts were previously deemed trusted but are now deemed untrusted.

OSVersionArchitecturePackageVersionFilename
Debian12alllibreoffice< 4:7.4.7-1+deb12u2libreoffice_4:7.4.7-1+deb12u2_all.deb
Debian11alllibreoffice< 1:7.0.4-4+deb11u9libreoffice_1:7.0.4-4+deb11u9_all.deb
Debian10alllibreoffice< 1:6.1.5-3+deb10u12libreoffice_1:6.1.5-3+deb10u12_all.deb
Debian999alllibreoffice< 4:24.2.3~rc1-2libreoffice_4:24.2.3~rc1-2_all.deb
Debian13alllibreoffice< 4:24.2.3~rc1-2libreoffice_4:24.2.3~rc1-2_all.deb

OS	Version	Architecture	Package	Version	Filename
Debian	12	all	libreoffice	< 4:7.4.7-1+deb12u2	libreoffice_4:7.4.7-1+deb12u2_all.deb
Debian	11	all	libreoffice	< 1:7.0.4-4+deb11u9	libreoffice_1:7.0.4-4+deb11u9_all.deb
Debian	10	all	libreoffice	< 1:6.1.5-3+deb10u12	libreoffice_1:6.1.5-3+deb10u12_all.deb
Debian	999	all	libreoffice	< 4:24.2.3~rc1-2	libreoffice_4:24.2.3~rc1-2_all.deb
Debian	13	all	libreoffice	< 4:24.2.3~rc1-2	libreoffice_4:24.2.3~rc1-2_all.deb