CVE-2014-0247 LibreOffice 4.2.4 executes unspecified VBA macros automatically, which has unspecified impact and attack vectors, possibly related to doc/docmacromode.cxx.
HighCVSS 10.0
EPSS 3.9%
- Published
- Updated
- Exploit status
- No public exploit known
Description
LibreOffice 4.2.4 executes unspecified VBA macros automatically, which has unspecified impact and attack vectors, possibly related to doc/docmacromode.cxx.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/libreoffice(Debian:12) | < 1:4.2.5-1 | 1:4.2.5-1 |
| debian/libreoffice(Debian:13) | < 1:4.2.5-1 | 1:4.2.5-1 |
| debian/libreoffice(Debian:14) | < 1:4.2.5-1 | 1:4.2.5-1 |
| fedoraproject fedora | = 19 | No fix listed |
| redhat enterprise linux desktop | = 7.0 | No fix listed |
| redhat enterprise linux server | = 7.0 | No fix listed |
| redhat enterprise linux workstation | = 7.0 | No fix listed |
| libreoffice | = 4.2.4 | No fix listed |
| Canonical Ubuntu Linux | = 14.04 | No fix listed |
| opensuse | = 13.1 | No fix listed |
References
- Debian Security Tracker CVE-2014-0247 vendor-advisory
- FEDORA-2014-7679 third-party-advisory vendor-advisory
- openSUSE-SU-2014:0860 third-party-advisory vendor-advisory
- people.canonical.com third-party-advisory
- RHSA-2015:0377 third-party-advisory vendor-advisory
- 57383 third-party-advisory
- 59330 third-party-advisory
- 60799 third-party-advisory
- GLSA-201408-19 third-party-advisory vendor-advisory
- 68151 third-party-advisory vdb-entry
- USN-2253-1 third-party-advisory vendor-advisory
- bugs.mageia.org issue-tracking
- gerrit.libreoffice.org
- www.libreoffice.org vendor-advisory