Lucene search
RootSSV:30216HistoryMar 23, 2012 - 12:00 a.m.
OpenOffice ODF文档信息泄露漏洞
2012-03-2300:00:00
Root
www.seebug.org
21
0.004 Low
EPSS
Percentile
74.8%
Bugtraq ID: 52681
CVE ID：CVE-2012-0037
OpenOffice是一款开放源代码的文字处理系统
OpenOffice.org存在一个XML外部实体攻击，处理ODF文档中某些XML组件中的外部实体时存在漏洞，通过构建外部实体引用其他本地文件系统资源，攻击者可以无需用户交互把本地内容注入到ODF文档中，导致信息泄露
0
OpenOffice 3.4 Beta
OpenOffice 3.3
厂商解决方案
用户可参考如下供应商提供的安全公告获得补丁信息：
http://www.openoffice.org/security/cves/CVE-2012-0037.html
Related
nessus
nessus
LibreOffice < 3.4.6 / 3.5.1 XML External Entity RDF Document Handling Information Disclosure
2012-04-12 00:00:00
SuSE 11.1 Security Update : libraptor (SAT Patch Number 5836)
2012-03-26 00:00:00
Mandriva Linux Security Advisory : libreoffice (MDVSA-2012:063)
2012-09-06 00:00:00
openvas
openvas
Ubuntu Update for raptor USN-1480-1
2012-06-19 00:00:00
Ubuntu: Security Advisory (USN-1480-1)
2012-06-19 00:00:00
FreeBSD Ports: raptor2
2012-04-30 00:00:00
ubuntu
ubuntu
Raptor vulnerability
2012-06-18 00:00:00
Raptor vulnerability
2013-07-08 00:00:00
veracode
veracode
XML External Entity Expansion
2020-04-10 01:12:37
freebsd
freebsd
raptor/raptor2 -- XXE in RDF/XML File Interpretation
2012-03-24 00:00:00
redhat
redhat
(RHSA-2012:0411) Important: openoffice.org security update
2012-03-22 00:00:00
(RHSA-2012:0410) Important: raptor security update
2012-03-22 00:00:00
fedora
fedora
[SECURITY] Fedora 17 Update: raptor2-2.0.7-1.fc17
2012-04-12 02:56:09
[SECURITY] Fedora 17 Update: raptor-1.4.21-12.fc17
2012-07-30 22:27:56
[SECURITY] Fedora 16 Update: raptor2-2.0.7-1.fc16
2012-04-12 11:35:14
securityvulns
securityvulns
CVE-2012-0037: libraptor - XXE in RDF/XML File Interpretation (Multiple office products affected)
2012-04-02 00:00:00
[SECURITY] [DSA 2438-1] raptor security update
2012-03-26 00:00:00
raptor library (libreoffice / openoffice) file injection
2012-04-02 00:00:00
debian
debian
[SECURITY] [DSA 2438-1] raptor security update
2012-03-22 16:44:46
cve
cve
CVE-2012-0037
2012-06-17 03:41:40
prion
prion
Xxe
2012-06-17 03:41:00
ubuntucve
ubuntucve
CVE-2012-0037
2012-03-22 00:00:00
cvelist
cvelist
CVE-2012-0037
2012-06-17 01:00:00
centos
centos
openoffice.org security update
2012-03-23 18:34:12
raptor security update
2012-03-22 20:07:09
rosalinux
rosalinux
Advisory ROSA-SA-2021-1961
2021-07-02 18:04:27
oraclelinux
oraclelinux
raptor security update
2012-03-22 00:00:00
nvd
nvd
CVE-2012-0037
2012-06-17 03:41:40
gentoo
gentoo
LibreOffice: Multiple vulnerabilities
2012-09-24 00:00:00
OpenOffice, LibreOffice: Multiple vulnerabilities
2014-08-31 00:00:00