Published: 17/06/2012 Updated: 15/02/2024

CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6

CVSS v3 Base Score: 6.5 | Impact Score: 3.6 | Exploitability Score: 2.8

VMScore: 383

Vector: AV:N/AC:M/Au:N/C:P/I:N/A:N

Redland Raptor (aka libraptor) prior to 2.0.7, as used by OpenOffice 3.3 and 3.4 Beta, LibreOffice prior to 3.4.6 and 3.5.x prior to 3.5.1, and other products, allows user-assisted remote malicious users to read arbitrary files via a crafted XML external entity (XXE) declaration and reference in an RDF document.

Vulnerable Product	Search on Vulmon	Subscribe to Product
librdf raptor
libreoffice libreoffice 3.5.0
libreoffice libreoffice
apache openoffice 3.3.0
apache openoffice 3.4.0
fedoraproject fedora 17
fedoraproject fedora 16
redhat enterprise linux server 5.0
redhat enterprise linux server aus 6.2
redhat enterprise linux workstation 5.0
redhat enterprise linux desktop 6.0
redhat enterprise linux server 6.0
redhat enterprise linux workstation 6.0
redhat enterprise linux desktop 5.0
redhat storage 2.0
redhat storage for public cloud 2.0
redhat enterprise linux eus 6.2
redhat gluster storage server for on-premise 2.0
debian debian linux 6.0

Debian Bug report logs - #677427 raptor: Fix for CVE-2012-0037 no applied during build Package: raptor; Maintainer for raptor is Dave Beckett <dajobe@debianorg>; Reported by: Jamie Strandboge <jamie@ubuntucom> Date: Wed, 13 Jun 2012 21:33:02 UTC Severity: grave Tags: patch, security Found in version 1421-7 Fixed ...

Synopsis Important: openofficeorg security update Type/Severity Security Advisory: Important Topic Updated openofficeorg packages that fix one security issue are nowavailable for Red Hat Enterprise Linux 5The Red Hat Security Response Team has rated this update as havingimportant security impact A Commo ...

Synopsis Important: raptor security update Type/Severity Security Advisory: Important Topic Updated raptor packages that fix one security issue are now available forRed Hat Enterprise Linux 6The Red Hat Security Response Team has rated this update as havingimportant security impact A Common Vulnerability ...

Applications using Raptor could be made to expose sensitive information or run programs as your login if they opened a specially crafted file ...

CWE-611 http://www.debian.org/security/2012/dsa-2438 http://www.libreoffice.org/advisories/CVE-2012-0037/http://secunia.com/advisories/48493 http://rhn.redhat.com/errata/RHSA-2012-0411.html http://rhn.redhat.com/errata/RHSA-2012-0410.html http://www.osvdb.org/80307 http://secunia.com/advisories/48529 http://www.mandriva.com/security/advisories?name=MDVSA-2012:063 http://www.openwall.com/lists/oss-security/2012/03/27/4 http://www.mandriva.com/security/advisories?name=MDVSA-2012:062 http://secunia.com/advisories/48526 http://librdf.org/raptor/RELEASE.html#rel2_0_7 http://secunia.com/advisories/48479 http://www.mandriva.com/security/advisories?name=MDVSA-2012:061 http://secunia.com/advisories/48542 http://vsecurity.com/resources/advisory/20120324-1/http://www.securityfocus.com/bid/52681 http://blog.documentfoundation.org/2012/03/22/tdf-announces-libreoffice-3-4-6/http://secunia.com/advisories/48494 http://lists.fedoraproject.org/pipermail/package-announce/2012-April/078242.html http://lists.fedoraproject.org/pipermail/package-announce/2012-April/077708.html http://secunia.com/advisories/48649 http://www.securitytracker.com/id?1026837 http://security.gentoo.org/glsa/glsa-201209-05.xml http://secunia.com/advisories/50692 https://github.com/dajobe/raptor/commit/a676f235309a59d4aa78eeffd2574ae5d341fcb0 http://secunia.com/advisories/60799 http://www.gentoo.org/security/en/glsa/glsa-201408-19.xml http://www.openoffice.org/security/cves/CVE-2012-0037.html https://exchange.xforce.ibmcloud.com/vulnerabilities/74235 https://lists.apache.org/thread.html/re0504f08000df786e51795940501e81a5d0ae981ecca68141e87ece0%40%3Ccommits.openoffice.apache.org%3E https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=677427 https://usn.ubuntu.com/1901-1/https://nvd.nist.gov

CVE-2012-0037

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

References

Vulmon Search

About

Products

Connect