PT-2014-2019 · Document Foundation+3 · Libreoffice+3

Stephen Bergmann · Publicado 2014-06-23 · Atualizado 2024-06-15 · CVE-2014-0247

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions LibreOffice version 4.2.4

Description The issue is related to the handling of macros in the doc/docmacromode.cxx component, which can allow a remote attacker to gain unauthorized access to confidential data, cause a denial of service, or impact data integrity.

Recommendations For LibreOffice version 4.2.4, consider disabling the automatic execution of VBA macros as a temporary workaround until a patch is available. Restrict access to sensitive documents and macros to minimize the risk of exploitation.

Correção

Enumeração de Fraquezas

CWE-152

Identificadores relacionados

BDU:2020-02955

CESA-2015_0377

CVE-2014-0247

MGASA-2014-0447

OPENSUSE-SU-2024:10006-1

RHSA-2015:0377

RHSA-2015_0377

USN-2253-1

Produtos afetados

Centos

Libreoffice

Red Hat

Ubuntu

Referências · 94

• https://gerrit.libreoffice.org/gitweb?p=core.git%3Ba=blobdiff%3Bf=sfx2/source/doc/docmacromode.cxx%3Bh=4d4ae52b4339582a039744d03671c1db0633d6c3%3Bhp=2108d1920f8148ff60fd4a57684f295d6d733e7b%3Bhb=1b0402f87c9b17fef2141130bfaa1798ece6ba0d%3Bhpb=4d2113250fa7ed62fe2c53ed0f76e3de5875cb81 · Nota
• https://access.redhat.com/security/cve/CVE-2014-0247 · Nota
• https://lists.centos.org/pipermail/centos-cr-announce/2015-March/027909.html · Nota
• http://lists.fedoraproject.org/pipermail/package-announce/2014-July/135020.html · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2014-0247 · Nota de Segurança
• https://advisories.mageia.org/MGASA-2014-0447.html · Nota de Segurança
• https://osv.dev/vulnerability/openSUSE-SU-2024:10006-1 · Aviso do Fabricante
• https://lists.centos.org/pipermail/centos-cr-announce/2015-March/021256.html · Nota
• https://osv.dev/vulnerability/USN-2253-1 · Aviso do Fabricante
• https://osv.dev/vulnerability/MGASA-2014-0447 · Aviso do Fabricante
• https://lists.centos.org/pipermail/centos-cr-announce/2015-March/007820.html · Nota
• https://lists.centos.org/pipermail/centos-cr-announce/2015-March/014529.html · Nota
• https://lists.centos.org/pipermail/centos-cr-announce/2015-March/014535.html · Nota
• https://lists.centos.org/pipermail/centos-cr-announce/2015-March/027921.html · Nota
• https://lists.centos.org/pipermail/centos-cr-announce/2015-March/014566.html · Nota