CVE-2014-0247

LibreOffice 4.2.4 executes unspecified VBA macros automatically, which has unspecified impact and attack vectors, possibly related to doc/docmacromode.cxx

published July 3, 2014

CVSS
—
EPSS
4%
Percentile
90.1
In the wild
Unconfirmed
What it is

⚠️ LibreOffice 4.2.4 has a hidden quirk: it runs VBA macros automatically, like a chef preparing a dish before checking the recipe! Think of it as a restaurant where the cook starts making a meal based on an order they never confirmed. This automatic execution can lead to unexpected consequences if the macros contain unwelcome surprises. If malicious macros are executed without user consent, it could potentially lead to unwanted data manipulation or security breaches. While the exact impact is unspecified, the risks of executing unverified commands can be quite serious when it comes to sensitive information.

Put simply

Think of it as a restaurant where the cook starts making a meal based on an order they never confirmed. This automatic execution can lead to unexpected consequences if the macros contain unwelcome surprises. This vulnerability allows LibreOffice to execute VBA macros automatically without user interaction, which may create opportunities for exploits, particularly if malicious documents are involved.

What to do

If malicious macros are executed without user consent, it could potentially lead to unwanted data manipulation or security breaches. While the exact impact is unspecified, the risks of executing unverified commands can be quite serious when it comes to sensitive information. To protect yourself, consider upgrading to a version beyond 4.2.4, where this behavior is addressed. Additionally, review your security settings to disable automatic macro execution, enhancing your document safety. You've got this! With these steps, you'll keep your documents secure and your cooking on the right track! 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.03890 · 90.1th percentile
Published
2014-07-03T17:00Z
EPSS history
Timeline
  • 03 JUL 17:00Z
    LibreOffice 4.2.4 executes unspecified VBA macros automatically, which has unspecified impact and attack vectors, possibly related to doc/docmacromode.cxx
    cvelistv5