Cloudanix VulnDB

CVE-2024-3044

None

CVSS

—

EPSS

1.0%

Published

May 14, 2024

CISA due date

—

Cloudanix analysis

Monitor only SSVC: Track

Clicking a picture inside certain documents can now run hidden commands without asking first, so organizations should update their software to stop this automatic behavior.

Exploitation
Requires User Interaction
Attacker needs
User Interaction
Complexity
Moderate
Impact
Remote Code Execution
Component
Application
Class
Improper Input Validation
Remediation
Upgrade
Effort
Medium
Patch risk
Low

What it actually does

Unchecked script execution in graphic on-click binding allows documents to trigger built-in scripts without user prompt or trust validation.

Why it matters to the business

Attackers can deliver malicious documents that execute code automatically when opened and a graphic is clicked, increasing risk of compromise in document-heavy workflows; low exploit prevalence reduces immediate urgency but still requires patching older Chromium installs on Debian 11.

How an attack unfolds

An attacker crafts a document containing a specially bound graphic; when the victim opens the document and clicks the graphic, the embedded script runs without warning because the binding bypasses prior trust checks.

How to fix it

Upgrade affected Chromium packages on Debian 11 to version 115.0.5790.98-1~deb11u1 or later; apply vendor updates for LibreOffice if separate installations exist.

How to confirm the fix worked

Verify package versions match or exceed the fixed releases listed for Debian 11 Chromium; test document handling with crafted on-click graphics to confirm prompts or blocks are enforced.

Typical attack path

  1. Attacker creates malicious document with on-click graphic binding
  2. Victim receives and opens the document
  3. Victim clicks the graphic
  4. Script executes with LibreOffice privileges

How to detect it

Search document processing logs and application execution traces for unexpected script invocations triggered by graphic elements; review file open events from affected versions.

What your security team should do

  • Prioritize patching Debian 11 Chromium systems to the specified fixed version
  • Review document handling policies and disable unnecessary script execution features
  • Monitor EPSS and KEV updates for any rise in exploitation activity

The record

Unchecked script execution in Graphic on-click binding in affected LibreOffice versions allows an attacker to create a document which without prompt will execute scripts built-into LibreOffice on clicking a graphic. Such scripts were previously deemed trusted but are now deemed untrusted.

Affected packages

Ecosystem Package Introduced Fixed
AlmaLinux:8 autocorr-af 0 1:6.4.7.2-17.el8_10.alma.1
AlmaLinux:8 autocorr-bg 0 1:6.4.7.2-17.el8_10.alma.1
AlmaLinux:8 autocorr-ca 0 1:6.4.7.2-17.el8_10.alma.1
AlmaLinux:8 autocorr-cs 0 1:6.4.7.2-17.el8_10.alma.1
AlmaLinux:8 autocorr-da 0 1:6.4.7.2-17.el8_10.alma.1
AlmaLinux:8 autocorr-de 0 1:6.4.7.2-17.el8_10.alma.1
AlmaLinux:8 autocorr-en 0 1:6.4.7.2-17.el8_10.alma.1
AlmaLinux:8 autocorr-es 0 1:6.4.7.2-17.el8_10.alma.1
AlmaLinux:8 autocorr-fa 0 1:6.4.7.2-17.el8_10.alma.1
AlmaLinux:8 autocorr-fi 0 1:6.4.7.2-17.el8_10.alma.1
AlmaLinux:8 autocorr-fr 0 1:6.4.7.2-17.el8_10.alma.1
AlmaLinux:8 autocorr-ga 0 1:6.4.7.2-17.el8_10.alma.1
AlmaLinux:8 autocorr-hr 0 1:6.4.7.2-17.el8_10.alma.1
AlmaLinux:8 autocorr-hu 0 1:6.4.7.2-17.el8_10.alma.1
AlmaLinux:8 autocorr-is 0 1:6.4.7.2-17.el8_10.alma.1
AlmaLinux:8 autocorr-it 0 1:6.4.7.2-17.el8_10.alma.1
AlmaLinux:8 autocorr-ja 0 1:6.4.7.2-17.el8_10.alma.1
AlmaLinux:8 autocorr-ko 0 1:6.4.7.2-17.el8_10.alma.1
AlmaLinux:8 autocorr-lb 0 1:6.4.7.2-17.el8_10.alma.1
AlmaLinux:8 autocorr-lt 0 1:6.4.7.2-17.el8_10.alma.1
AlmaLinux:8 autocorr-mn 0 1:6.4.7.2-17.el8_10.alma.1
AlmaLinux:8 autocorr-nl 0 1:6.4.7.2-17.el8_10.alma.1
AlmaLinux:8 autocorr-pl 0 1:6.4.7.2-17.el8_10.alma.1
AlmaLinux:8 autocorr-pt 0 1:6.4.7.2-17.el8_10.alma.1
AlmaLinux:8 autocorr-ro 0 1:6.4.7.2-17.el8_10.alma.1
AlmaLinux:8 autocorr-ru 0 1:6.4.7.2-17.el8_10.alma.1
AlmaLinux:8 autocorr-sk 0 1:6.4.7.2-17.el8_10.alma.1
AlmaLinux:8 autocorr-sl 0 1:6.4.7.2-17.el8_10.alma.1
AlmaLinux:8 autocorr-sr 0 1:6.4.7.2-17.el8_10.alma.1
AlmaLinux:8 autocorr-sv 0 1:6.4.7.2-17.el8_10.alma.1
AlmaLinux:8 autocorr-tr 0 1:6.4.7.2-17.el8_10.alma.1
AlmaLinux:8 autocorr-vi 0 1:6.4.7.2-17.el8_10.alma.1
AlmaLinux:8 autocorr-zh 0 1:6.4.7.2-17.el8_10.alma.1
AlmaLinux:8 libreoffice 0 1:6.4.7.2-17.el8_10.alma.1
AlmaLinux:8 libreoffice-base 0 1:6.4.7.2-17.el8_10.alma.1
AlmaLinux:8 libreoffice-calc 0 1:6.4.7.2-17.el8_10.alma.1
AlmaLinux:8 libreoffice-core 0 1:6.4.7.2-17.el8_10.alma.1
AlmaLinux:8 libreoffice-data 0 1:6.4.7.2-17.el8_10.alma.1
AlmaLinux:8 libreoffice-draw 0 1:6.4.7.2-17.el8_10.alma.1
AlmaLinux:8 libreoffice-emailmerge 0 1:6.4.7.2-17.el8_10.alma.1
AlmaLinux:8 libreoffice-filters 0 1:6.4.7.2-17.el8_10.alma.1
AlmaLinux:8 libreoffice-gdb-debug-support 0 1:6.4.7.2-17.el8_10.alma.1
AlmaLinux:8 libreoffice-graphicfilter 0 1:6.4.7.2-17.el8_10.alma.1
AlmaLinux:8 libreoffice-gtk3 0 1:6.4.7.2-17.el8_10.alma.1
AlmaLinux:8 libreoffice-help-ar 0 1:6.4.7.2-17.el8_10.alma.1
AlmaLinux:8 libreoffice-help-bg 0 1:6.4.7.2-17.el8_10.alma.1
AlmaLinux:8 libreoffice-help-bn 0 1:6.4.7.2-17.el8_10.alma.1
AlmaLinux:8 libreoffice-help-ca 0 1:6.4.7.2-17.el8_10.alma.1
AlmaLinux:8 libreoffice-help-cs 0 1:6.4.7.2-17.el8_10.alma.1
AlmaLinux:8 libreoffice-help-da 0 1:6.4.7.2-17.el8_10.alma.1
AlmaLinux:8 libreoffice-help-de 0 1:6.4.7.2-17.el8_10.alma.1
AlmaLinux:8 libreoffice-help-dz 0 1:6.4.7.2-17.el8_10.alma.1
AlmaLinux:8 libreoffice-help-el 0 1:6.4.7.2-17.el8_10.alma.1
AlmaLinux:8 libreoffice-help-en 0 1:6.4.7.2-17.el8_10.alma.1
AlmaLinux:8 libreoffice-help-es 0 1:6.4.7.2-17.el8_10.alma.1
AlmaLinux:8 libreoffice-help-et 0 1:6.4.7.2-17.el8_10.alma.1
AlmaLinux:8 libreoffice-help-eu 0 1:6.4.7.2-17.el8_10.alma.1
AlmaLinux:8 libreoffice-help-fi 0 1:6.4.7.2-17.el8_10.alma.1
AlmaLinux:8 libreoffice-help-fr 0 1:6.4.7.2-17.el8_10.alma.1
AlmaLinux:8 libreoffice-help-gl 0 1:6.4.7.2-17.el8_10.alma.1
AlmaLinux:8 libreoffice-help-gu 0 1:6.4.7.2-17.el8_10.alma.1
AlmaLinux:8 libreoffice-help-he 0 1:6.4.7.2-17.el8_10.alma.1
AlmaLinux:8 libreoffice-help-hi 0 1:6.4.7.2-17.el8_10.alma.1
AlmaLinux:8 libreoffice-help-hr 0 1:6.4.7.2-17.el8_10.alma.1
AlmaLinux:8 libreoffice-help-hu 0 1:6.4.7.2-17.el8_10.alma.1
AlmaLinux:8 libreoffice-help-id 0 1:6.4.7.2-17.el8_10.alma.1
AlmaLinux:8 libreoffice-help-it 0 1:6.4.7.2-17.el8_10.alma.1
AlmaLinux:8 libreoffice-help-ja 0 1:6.4.7.2-17.el8_10.alma.1
AlmaLinux:8 libreoffice-help-ko 0 1:6.4.7.2-17.el8_10.alma.1
AlmaLinux:8 libreoffice-help-lt 0 1:6.4.7.2-17.el8_10.alma.1
AlmaLinux:8 libreoffice-help-lv 0 1:6.4.7.2-17.el8_10.alma.1
AlmaLinux:8 libreoffice-help-nb 0 1:6.4.7.2-17.el8_10.alma.1
AlmaLinux:8 libreoffice-help-nl 0 1:6.4.7.2-17.el8_10.alma.1
AlmaLinux:8 libreoffice-help-nn 0 1:6.4.7.2-17.el8_10.alma.1
AlmaLinux:8 libreoffice-help-pl 0 1:6.4.7.2-17.el8_10.alma.1
AlmaLinux:8 libreoffice-help-pt-BR 0 1:6.4.7.2-17.el8_10.alma.1
AlmaLinux:8 libreoffice-help-pt-PT 0 1:6.4.7.2-17.el8_10.alma.1
AlmaLinux:8 libreoffice-help-ro 0 1:6.4.7.2-17.el8_10.alma.1
AlmaLinux:8 libreoffice-help-ru 0 1:6.4.7.2-17.el8_10.alma.1
AlmaLinux:8 libreoffice-help-si 0 1:6.4.7.2-17.el8_10.alma.1
AlmaLinux:8 libreoffice-help-sk 0 1:6.4.7.2-17.el8_10.alma.1
AlmaLinux:8 libreoffice-help-sl 0 1:6.4.7.2-17.el8_10.alma.1
AlmaLinux:8 libreoffice-help-sv 0 1:6.4.7.2-17.el8_10.alma.1
AlmaLinux:8 libreoffice-help-ta 0 1:6.4.7.2-17.el8_10.alma.1
AlmaLinux:8 libreoffice-help-tr 0 1:6.4.7.2-17.el8_10.alma.1
AlmaLinux:8 libreoffice-help-uk 0 1:6.4.7.2-17.el8_10.alma.1
AlmaLinux:8 libreoffice-help-zh-Hans 0 1:6.4.7.2-17.el8_10.alma.1
AlmaLinux:8 libreoffice-help-zh-Hant 0 1:6.4.7.2-17.el8_10.alma.1
AlmaLinux:8 libreoffice-impress 0 1:6.4.7.2-17.el8_10.alma.1
AlmaLinux:8 libreoffice-langpack-af 0 1:6.4.7.2-17.el8_10.alma.1
AlmaLinux:8 libreoffice-langpack-ar 0 1:6.4.7.2-17.el8_10.alma.1
AlmaLinux:8 libreoffice-langpack-as 0 1:6.4.7.2-17.el8_10.alma.1
AlmaLinux:8 libreoffice-langpack-bg 0 1:6.4.7.2-17.el8_10.alma.1
AlmaLinux:8 libreoffice-langpack-bn 0 1:6.4.7.2-17.el8_10.alma.1
AlmaLinux:8 libreoffice-langpack-br 0 1:6.4.7.2-17.el8_10.alma.1
AlmaLinux:8 libreoffice-langpack-ca 0 1:6.4.7.2-17.el8_10.alma.1
AlmaLinux:8 libreoffice-langpack-cs 0 1:6.4.7.2-17.el8_10.alma.1
AlmaLinux:8 libreoffice-langpack-cy 0 1:6.4.7.2-17.el8_10.alma.1
AlmaLinux:8 libreoffice-langpack-da 0 1:6.4.7.2-17.el8_10.alma.1
AlmaLinux:8 libreoffice-langpack-de 0 1:6.4.7.2-17.el8_10.alma.1
AlmaLinux:8 libreoffice-langpack-dz 0 1:6.4.7.2-17.el8_10.alma.1
AlmaLinux:8 libreoffice-langpack-el 0 1:6.4.7.2-17.el8_10.alma.1
AlmaLinux:8 libreoffice-langpack-en 0 1:6.4.7.2-17.el8_10.alma.1
AlmaLinux:8 libreoffice-langpack-es 0 1:6.4.7.2-17.el8_10.alma.1
AlmaLinux:8 libreoffice-langpack-et 0 1:6.4.7.2-17.el8_10.alma.1
AlmaLinux:8 libreoffice-langpack-eu 0 1:6.4.7.2-17.el8_10.alma.1
AlmaLinux:8 libreoffice-langpack-fa 0 1:6.4.7.2-17.el8_10.alma.1
AlmaLinux:8 libreoffice-langpack-fi 0 1:6.4.7.2-17.el8_10.alma.1
AlmaLinux:8 libreoffice-langpack-fr 0 1:6.4.7.2-17.el8_10.alma.1
AlmaLinux:8 libreoffice-langpack-ga 0 1:6.4.7.2-17.el8_10.alma.1
AlmaLinux:8 libreoffice-langpack-gl 0 1:6.4.7.2-17.el8_10.alma.1
AlmaLinux:8 libreoffice-langpack-gu 0 1:6.4.7.2-17.el8_10.alma.1
AlmaLinux:8 libreoffice-langpack-he 0 1:6.4.7.2-17.el8_10.alma.1
AlmaLinux:8 libreoffice-langpack-hi 0 1:6.4.7.2-17.el8_10.alma.1
AlmaLinux:8 libreoffice-langpack-hr 0 1:6.4.7.2-17.el8_10.alma.1
AlmaLinux:8 libreoffice-langpack-hu 0 1:6.4.7.2-17.el8_10.alma.1
AlmaLinux:8 libreoffice-langpack-id 0 1:6.4.7.2-17.el8_10.alma.1
AlmaLinux:8 libreoffice-langpack-it 0 1:6.4.7.2-17.el8_10.alma.1
AlmaLinux:8 libreoffice-langpack-ja 0 1:6.4.7.2-17.el8_10.alma.1
AlmaLinux:8 libreoffice-langpack-kk 0 1:6.4.7.2-17.el8_10.alma.1
AlmaLinux:8 libreoffice-langpack-kn 0 1:6.4.7.2-17.el8_10.alma.1
AlmaLinux:8 libreoffice-langpack-ko 0 1:6.4.7.2-17.el8_10.alma.1
AlmaLinux:8 libreoffice-langpack-lt 0 1:6.4.7.2-17.el8_10.alma.1
AlmaLinux:8 libreoffice-langpack-lv 0 1:6.4.7.2-17.el8_10.alma.1
AlmaLinux:8 libreoffice-langpack-mai 0 1:6.4.7.2-17.el8_10.alma.1
AlmaLinux:8 libreoffice-langpack-ml 0 1:6.4.7.2-17.el8_10.alma.1
AlmaLinux:8 libreoffice-langpack-mr 0 1:6.4.7.2-17.el8_10.alma.1
AlmaLinux:8 libreoffice-langpack-nb 0 1:6.4.7.2-17.el8_10.alma.1
AlmaLinux:8 libreoffice-langpack-nl 0 1:6.4.7.2-17.el8_10.alma.1
AlmaLinux:8 libreoffice-langpack-nn 0 1:6.4.7.2-17.el8_10.alma.1
AlmaLinux:8 libreoffice-langpack-nr 0 1:6.4.7.2-17.el8_10.alma.1
AlmaLinux:8 libreoffice-langpack-nso 0 1:6.4.7.2-17.el8_10.alma.1
AlmaLinux:8 libreoffice-langpack-or 0 1:6.4.7.2-17.el8_10.alma.1
AlmaLinux:8 libreoffice-langpack-pa 0 1:6.4.7.2-17.el8_10.alma.1
AlmaLinux:8 libreoffice-langpack-pl 0 1:6.4.7.2-17.el8_10.alma.1
AlmaLinux:8 libreoffice-langpack-pt-BR 0 1:6.4.7.2-17.el8_10.alma.1
AlmaLinux:8 libreoffice-langpack-pt-PT 0 1:6.4.7.2-17.el8_10.alma.1
AlmaLinux:8 libreoffice-langpack-ro 0 1:6.4.7.2-17.el8_10.alma.1
AlmaLinux:8 libreoffice-langpack-ru 0 1:6.4.7.2-17.el8_10.alma.1
AlmaLinux:8 libreoffice-langpack-si 0 1:6.4.7.2-17.el8_10.alma.1
AlmaLinux:8 libreoffice-langpack-sk 0 1:6.4.7.2-17.el8_10.alma.1
AlmaLinux:8 libreoffice-langpack-sl 0 1:6.4.7.2-17.el8_10.alma.1
AlmaLinux:8 libreoffice-langpack-sr 0 1:6.4.7.2-17.el8_10.alma.1
AlmaLinux:8 libreoffice-langpack-ss 0 1:6.4.7.2-17.el8_10.alma.1
AlmaLinux:8 libreoffice-langpack-st 0 1:6.4.7.2-17.el8_10.alma.1
AlmaLinux:8 libreoffice-langpack-sv 0 1:6.4.7.2-17.el8_10.alma.1
AlmaLinux:8 libreoffice-langpack-ta 0 1:6.4.7.2-17.el8_10.alma.1
AlmaLinux:8 libreoffice-langpack-te 0 1:6.4.7.2-17.el8_10.alma.1
AlmaLinux:8 libreoffice-langpack-th 0 1:6.4.7.2-17.el8_10.alma.1
AlmaLinux:8 libreoffice-langpack-tn 0 1:6.4.7.2-17.el8_10.alma.1
AlmaLinux:8 libreoffice-langpack-tr 0 1:6.4.7.2-17.el8_10.alma.1
AlmaLinux:8 libreoffice-langpack-ts 0 1:6.4.7.2-17.el8_10.alma.1
AlmaLinux:8 libreoffice-langpack-uk 0 1:6.4.7.2-17.el8_10.alma.1
AlmaLinux:8 libreoffice-langpack-ve 0 1:6.4.7.2-17.el8_10.alma.1
AlmaLinux:8 libreoffice-langpack-xh 0 1:6.4.7.2-17.el8_10.alma.1
AlmaLinux:8 libreoffice-langpack-zh-Hans 0 1:6.4.7.2-17.el8_10.alma.1
AlmaLinux:8 libreoffice-langpack-zh-Hant 0 1:6.4.7.2-17.el8_10.alma.1
AlmaLinux:8 libreoffice-langpack-zu 0 1:6.4.7.2-17.el8_10.alma.1
AlmaLinux:8 libreoffice-math 0 1:6.4.7.2-17.el8_10.alma.1
AlmaLinux:8 libreoffice-ogltrans 0 1:6.4.7.2-17.el8_10.alma.1
AlmaLinux:8 libreoffice-opensymbol-fonts 0 1:6.4.7.2-17.el8_10.alma.1
AlmaLinux:8 libreoffice-pdfimport 0 1:6.4.7.2-17.el8_10.alma.1
AlmaLinux:8 libreoffice-pyuno 0 1:6.4.7.2-17.el8_10.alma.1
AlmaLinux:8 libreoffice-sdk 0 1:6.4.7.2-17.el8_10.alma.1
AlmaLinux:8 libreoffice-sdk-doc 0 1:6.4.7.2-17.el8_10.alma.1
AlmaLinux:8 libreoffice-ure 0 1:6.4.7.2-17.el8_10.alma.1
AlmaLinux:8 libreoffice-ure-common 0 1:6.4.7.2-17.el8_10.alma.1
AlmaLinux:8 libreoffice-wiki-publisher 0 1:6.4.7.2-17.el8_10.alma.1
AlmaLinux:8 libreoffice-writer 0 1:6.4.7.2-17.el8_10.alma.1
AlmaLinux:8 libreoffice-x11 0 1:6.4.7.2-17.el8_10.alma.1
AlmaLinux:8 libreoffice-xsltfilter 0 1:6.4.7.2-17.el8_10.alma.1
AlmaLinux:8 libreofficekit 0 1:6.4.7.2-17.el8_10.alma.1
AlmaLinux:9 autocorr-af 0 1:7.1.8.1-13.el9_4.alma.1
AlmaLinux:9 autocorr-bg 0 1:7.1.8.1-13.el9_4.alma.1
AlmaLinux:9 autocorr-ca 0 1:7.1.8.1-13.el9_4.alma.1
AlmaLinux:9 autocorr-cs 0 1:7.1.8.1-13.el9_4.alma.1
AlmaLinux:9 autocorr-da 0 1:7.1.8.1-13.el9_4.alma.1
AlmaLinux:9 autocorr-de 0 1:7.1.8.1-13.el9_4.alma.1
AlmaLinux:9 autocorr-dsb 0 1:7.1.8.1-13.el9_4.alma.1
AlmaLinux:9 autocorr-el 0 1:7.1.8.1-13.el9_4.alma.1
AlmaLinux:9 autocorr-en 0 1:7.1.8.1-13.el9_4.alma.1
AlmaLinux:9 autocorr-es 0 1:7.1.8.1-13.el9_4.alma.1
AlmaLinux:9 autocorr-fa 0 1:7.1.8.1-13.el9_4.alma.1
AlmaLinux:9 autocorr-fi 0 1:7.1.8.1-13.el9_4.alma.1
AlmaLinux:9 autocorr-fr 0 1:7.1.8.1-13.el9_4.alma.1
AlmaLinux:9 autocorr-ga 0 1:7.1.8.1-13.el9_4.alma.1
AlmaLinux:9 autocorr-hr 0 1:7.1.8.1-13.el9_4.alma.1
AlmaLinux:9 autocorr-hsb 0 1:7.1.8.1-13.el9_4.alma.1
AlmaLinux:9 autocorr-hu 0 1:7.1.8.1-13.el9_4.alma.1
AlmaLinux:9 autocorr-is 0 1:7.1.8.1-13.el9_4.alma.1
AlmaLinux:9 autocorr-it 0 1:7.1.8.1-13.el9_4.alma.1
AlmaLinux:9 autocorr-ja 0 1:7.1.8.1-13.el9_4.alma.1
AlmaLinux:9 autocorr-ko 0 1:7.1.8.1-13.el9_4.alma.1
AlmaLinux:9 autocorr-lb 0 1:7.1.8.1-13.el9_4.alma.1
AlmaLinux:9 autocorr-lt 0 1:7.1.8.1-13.el9_4.alma.1
AlmaLinux:9 autocorr-mn 0 1:7.1.8.1-13.el9_4.alma.1
AlmaLinux:9 autocorr-nl 0 1:7.1.8.1-13.el9_4.alma.1
AlmaLinux:9 autocorr-pl 0 1:7.1.8.1-13.el9_4.alma.1
AlmaLinux:9 autocorr-pt 0 1:7.1.8.1-13.el9_4.alma.1
AlmaLinux:9 autocorr-ro 0 1:7.1.8.1-13.el9_4.alma.1

Related vulnerabilities