Vulnerability Intelligence Report
CVE-2012-0037
Redland Raptor (aka libraptor) before 2.0.7, as used by OpenOffice 3.3 and 3.4 Beta, LibreOffice before 3.4.6 and 3.5.x before 3.5.1, and other products, allows user-assisted remote attackers to read arbitrary files via a crafted XML external entity (XXE) declaration and reference in an RDF document.
No Active Exploit Signals
CVSS Base Score
6.5
MEDIUM
EPSS Probability:13.68%
Executive Threat Verdict
Evaluating...
Evaluating Threat Landscape...
Assessing known weaponization, exploitation telemetry, and federal advisories.
Attack Surface
—
Authentication
—
Weaponization
—
SSVC Action
—
Affected Products & Versions
| Vendor | Product | Affected Versions |
|---|---|---|
| librdf | raptor | all |
| libreoffice | libreoffice | 3.5.0 |
| apache | openoffice | 3.3.0, 3.4.0 |
| fedoraproject | fedora | 16, 17 |
| redhat | gluster_storage_server_for_on-premise | 2.0 |
| redhat | storage | 2.0 |
| redhat | storage_for_public_cloud | 2.0 |
| redhat | enterprise_linux_desktop | 5.0, 6.0 |
| redhat | enterprise_linux_eus | 6.2 |
| redhat | enterprise_linux_server | 5.0, 6.0 |
| redhat | enterprise_linux_server_aus | 6.2 |
| redhat | enterprise_linux_workstation | 5.0, 6.0 |
| debian | debian_linux | 6.0 |
References & Technical Advisories
No reference links found.
Threat Intelligence Signals
EPSS Score
13.682%
GitHub Advisory
Identity & Timeline
| Status | PUBLISHED |
| Assigning Authority | Red Hat, Inc. · Vendor · USA |
| Reserved | 2011-12-07T00:00:00 |
| Published | 2012-06-17T01:00:00 |
| Patch Date | 2012-01-29 |
| Last Updated | 2024-08-06T18:09:17 |
Community Chatter & Buzz