CVE-2024-3044

Unchecked script execution in Graphic on-click binding in affected LibreOffice versions allows an attacker to create a document which without prompt will execute scripts built-into LibreOffice on clicking a graphic. Such scripts were previously deemed trusted but are now deemed untrusted.

References

Affected packages

Git / github.com/libreoffice/core

Affected ranges

Type

GIT

Repo

https://github.com/libreoffice/core

Events

Introduced

Fixed

0f458d26d32bd4a104df739f333933aafae2536c

Introduced

Fixed

fc604d5980a783e74808a001f1918a603d920494

Database specific

{
    "versions": [
        {
            "introduced": "0"
        },
        {
            "fixed": "7.6.7.1"
        },
        {
            "introduced": "24.2.0.0"
        },
        {
            "fixed": "24.2.3.1"
        }
    ]
}

Database specific

unresolved_ranges

[
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "39"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "10.0"
            }
        ]
    }
]

source

"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2024-3044.json"