CVE-2024-3044 Graphic on-click binding allows unchecked script execution

2024-05-1420:19:51

CWE-20

Document Fdn.

github.com

graphic binding

script execution

libreoffice

cve-2024-3044

6.9 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

15.7%

JSON

Unchecked script execution in Graphic on-click binding in affected LibreOffice versions allows an attacker to create a document which without prompt will execute scripts built-into LibreOffice on clicking a graphic. Such scripts were previously deemed trusted but are now deemed untrusted.

CNA Affected

[
  {
    "vendor": "The Document Foundation",
    "product": "LibreOffice",
    "versions": [
      {
        "status": "affected",
        "version": "7.6",
        "lessThan": "7.6.7",
        "versionType": "7.6 series"
      },
      {
        "status": "affected",
        "version": "24.2",
        "lessThan": "24.2.3",
        "versionType": "24.2 series"
      }
    ],
    "defaultStatus": "unaffected"
  }
]