PT-2014-2019 · Document Foundation+3 · Libreoffice+3

Stephen Bergmann · Published 2014-06-23 · Updated 2024-06-15 · CVE-2014-0247

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions LibreOffice version 4.2.4

Description The issue is related to the handling of macros in the doc/docmacromode.cxx component, which can allow a remote attacker to gain unauthorized access to confidential data, cause a denial of service, or impact data integrity.

Recommendations For LibreOffice version 4.2.4, consider disabling the automatic execution of VBA macros as a temporary workaround until a patch is available. Restrict access to sensitive documents and macros to minimize the risk of exploitation.

Fix

Weakness Enumeration

CWE-152

Related Identifiers

BDU:2020-02955

CESA-2015_0377

CVE-2014-0247

MGASA-2014-0447

OPENSUSE-SU-2024:10006-1

RHSA-2015:0377

RHSA-2015_0377

USN-2253-1

Affected Products

Centos

Libreoffice

Red Hat

Ubuntu

References · 94

• http://lists.fedoraproject.org/pipermail/package-announce/2014-July/135020.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2014-0247 · Security Note
• https://advisories.mageia.org/MGASA-2014-0447.html · Security Note
• https://osv.dev/vulnerability/openSUSE-SU-2024:10006-1 · Vendor Advisory
• https://osv.dev/vulnerability/USN-2253-1 · Vendor Advisory
• https://osv.dev/vulnerability/MGASA-2014-0447 · Vendor Advisory
• http://lists.opensuse.org/opensuse-updates/2014-07/msg00006.html · Vendor Advisory
• https://ubuntu.com/security/CVE-2014-0247 · Vendor Advisory
• http://ubuntu.com/usn/USN-2253-1 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3693 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2014-0247 · Vendor Advisory
• http://rhn.redhat.com/errata/RHSA-2015-0377.html · Vendor Advisory
• https://lists.fedoraproject.org/pipermail/package-announce/2014-July/135020.html · Vendor Advisory
• https://libreoffice.org/about-us/security/advisories/cve-2014-0247 · Vendor Advisory
• http://gentoo.org/security/en/glsa/glsa-201408-19.xml · Vendor Advisory