Skip to content
OpenAdvisories
Medium USN-6789-1 1 CVE

libreoffice vulnerability

Published May 28, 2024 · Updated Apr 22, 2026

Ecosystem: Ubuntu

Summary

Amel Bouziane-Leblond discovered that LibreOffice incorrectly handled
graphic on-click bindings. If a user were tricked into clicking a graphic
in a specially crafted document, a remote attacker could possibly run
arbitrary script.

Fixed packages 3

ReleasePackageFixed in
Ubuntu · 20.04 LTS 20.04:LTS libreoffice 1:6.4.7-0ubuntu0.20.04.10
Ubuntu · 22.04 LTS 22.04:LTS libreoffice 1:7.3.7-0ubuntu0.22.04.5
Ubuntu · 24.04 LTS 24.04:LTS libreoffice 4:24.2.3-0ubuntu0.24.04.2

Vulnerabilities 1

  • Medium 6.5
    CVE-2024-3044

    Graphic on-click binding allows unchecked script execution

    Unchecked script execution in Graphic on-click binding in affected LibreOffice versions allows an attacker to create a document which without prompt will execute scripts built-into LibreOffice on clicking a graphic. Such scripts were previously deemed trusted…

    The Document Foundation LibreOffice libreoffice libreoffice Debian Ubuntu Alpine

References

  • report
    https://ubuntu.com/security/CVE-2024-3044