CVE-2012-5639 — Resource Exposure in Libreoffice

CWE-668 — Resource ExposureCWE-20 — Improper Input Validation8 documents6 sources
Severity
6.5MEDIUMNVD
EPSS
0.4%
top 36.45%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Debian LinuxDebian Libreoffice
Timeline
PublishedDec 20
Latest updateApr 23

Description

LibreOffice and OpenOffice automatically open embedded content

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:NExploitability: 2.8 | Impact: 3.6

Affected Packages1 packages

Also affects: Debian Linux 10.0, 8.0, 9.0

🔴Vulnerability Details

2
GHSA
GHSA-rvg2-vh9m-cq32: LibreOffice and OpenOffice automatically open embedded content↗2022-04-23
▶
OSV
CVE-2012-5639: LibreOffice and OpenOffice automatically open embedded content↗2019-12-20
▶

📋Vendor Advisories

2
Red Hat
OpenOffice: automatic opening of embedded external data↗2012-12-13
▶
Debian
CVE-2012-5639: libreoffice - LibreOffice and OpenOffice automatically open embedded content↗2012
▶

💬Community

3
Bugzilla
CVE-2012-5639 LibreOffice / OpenOffice: automatic opening of embedded external data [fedora-all]↗2012-12-15
▶
Bugzilla
CVE-2012-5639 LibreOffice / OpenOffice: automatic opening of embedded external data [fedora-all]↗2012-12-15
▶
Bugzilla
CVE-2012-5639 LibreOffice / OpenOffice: automatic opening of embedded external data↗2012-12-15
▶