Vulnerability Details : CVE-2024-6472
Certificate Validation user interface in LibreOffice allows potential vulnerability.
Signed macros are scripts that have been digitally signed by the
developer using a cryptographic signature. When a document with a signed
macro is opened a warning is displayed by LibreOffice before the macro
is executed.
Previously if verification failed the user could fail to understand the failure and choose to enable the macros anyway.
This issue affects LibreOffice: from 24.2 before 24.2.5.
Products affected by CVE-2024-6472
Please log in to view affected product information.
Exploit prediction scoring system (EPSS) score for CVE-2024-6472
0.02%
Probability of exploitation activity in the next 30 days
EPSS Score History
~ 3 %
Percentile, the proportion of vulnerabilities that are scored at or less
CVSS scores for CVE-2024-6472
| Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source | First Seen |
|---|---|---|---|---|---|---|
|
7.8
|
HIGH | CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H |
1.8
|
5.9
|
Document Foundation, The | 2024-08-05 |
CWE ids for CVE-2024-6472
-
The product does not validate, or incorrectly validates, a certificate.Assigned by: security@documentfoundation.org (Secondary)
References for CVE-2024-6472
-
https://www.libreoffice.org/about-us/security/advisories/CVE-2024-6472
CVE-2024-6472 | LibreOffice - Free and private office suite - Based on OpenOffice - Compatible with Microsoft
Jump to