Skip to content
CVE PROGRAM SOURCE RECORD6.5 Medium

CVE-2024-3044

Graphic on-click binding allows unchecked script execution

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Document Fdn.

Description

Unchecked script execution in Graphic on-click binding in affected LibreOffice versions allows an attacker to create a document which without prompt will execute scripts built-into LibreOffice on clicking a graphic. Such scripts were previously deemed trusted but are now deemed untrusted.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

The Document Foundation LibreOffice

Default version status: unaffected

  • 7.6 to < 7.6.7affected
  • 24.2 to < 24.2.3affected

References