CVE-2012-5639

Published: 20 December 2019

LibreOffice and OpenOffice automatically open embedded content

Priority

Low

CVSS 3 base score: 6.5

Status

Notes

seems more like a feature request. LibreOffice prompts the user
saying that the document contains links to external data and asks if the user
wants to refresh them. The prompt does not say what the files are. The
external content is fetched the first time without prompting.

See http://whatofhow.wordpress.com/2013/12/02/stealth-mode/ for
improvement that went into 4.2.
We will not be fixing this in precise, marking as ignored

References

• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5639
• http://www.openwall.com/lists/oss-security/2012/12/13
• http://www.openwall.com/lists/oss-security/2012/12/13/10
• NVD
• Launchpad
• Debian

Bugs

• https://bugs.freedesktop.org/show_bug.cgi?id=58295