CVE-2024-3044

2024-05-1506:28:43

redhat.com

access.redhat.com

cve-2024-3044

unchecked script execution

graphic on-click binding

libreoffice

attacker

document

prompt

trusted scripts

untrusted scripts

mitigation

red hat product security

criteria

ease of use

deployment

applicability

stability

6.6 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

15.7%

JSON

A flaw was found in LibreOffice. Unchecked script execution in graphic on-click binding allows an attacker to create a document, which, without a prompt, will execute scripts built into LibreOffice when clicking a graphic. These scripts were previously deemed trusted but are now deemed untrusted.

Mitigation

Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.