CVE-2024-3044

2024-05-1400:00:00

ubuntu.com

script execution

graphic on-click binding

libreoffice

cve-2024-3044

bugs

ubuntu

sru

unix

7.4 High

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

15.5%

JSON

Unchecked script execution in Graphic on-click binding in affected
LibreOffice versions allows an attacker to create a document which without
prompt will execute scripts built-into LibreOffice on clicking a graphic.
Such scripts were previously deemed trusted but are now deemed untrusted.

Bugs

OSVersionArchitecturePackageVersionFilename
ubuntu20.04noarchlibreoffice< 1:6.4.7-0ubuntu0.20.04.10UNKNOWN
ubuntu22.04noarchlibreoffice< 1:7.3.7-0ubuntu0.22.04.5UNKNOWN
ubuntu23.10noarchlibreoffice< 4:7.6.7-0ubuntu0.23.10.2UNKNOWN
ubuntu24.04noarchlibreoffice< 4:24.2.3-0ubuntu0.24.04.2UNKNOWN

OS	Version	Architecture	Package	Version	Filename
ubuntu	20.04	noarch	libreoffice	< 1:6.4.7-0ubuntu0.20.04.10	UNKNOWN
ubuntu	22.04	noarch	libreoffice	< 1:7.3.7-0ubuntu0.22.04.5	UNKNOWN
ubuntu	23.10	noarch	libreoffice	< 4:7.6.7-0ubuntu0.23.10.2	UNKNOWN
ubuntu	24.04	noarch	libreoffice	< 4:24.2.3-0ubuntu0.24.04.2	UNKNOWN