Lucene search

Gentoo FoundationMGASA-2024-0209

HistoryJun 03, 2024 - 9:30 p.m.

Updated libreoffice packages fix security vulnerability

2024-06-0321:30:48

Gentoo Foundation

advisories.mageia.org

libreoffice

security vulnerability

unchecked script execution

graphic on-click binding

cve-2024-3044

unix

AI Score

6.4

Confidence

Low

EPSS

Percentile

15.5%

JSON

Unchecked script execution in Graphic on-click binding in affected LibreOffice versions allows an attacker to create a document which without prompt will execute scripts built-into LibreOffice on clicking a graphic. Such scripts were previously deemed trusted but are now deemed untrusted. (CVE-2024-3044)

OSVersionArchitecturePackageVersionFilename
Mageia9noarchlibreoffice< 7.6.7.2-1libreoffice-7.6.7.2-1.mga9

OS	Version	Architecture	Package	Version	Filename
Mageia	9	noarch	libreoffice	< 7.6.7.2-1	libreoffice-7.6.7.2-1.mga9

References

bugs.mageia.org/show_bug.cgi?id=33222

lwn.net/Articles/973885/