CVE-2012-0037
- State
- Published
- Severity
- Not scored
- Published
- Jun 17, 2012
- Updated
- Aug 6, 2024
- Reserved
- Dec 7, 2011
Description
Redland Raptor (aka libraptor) before 2.0.7, as used by OpenOffice 3.3 and 3.4 Beta, LibreOffice before 3.4.6 and 3.5.x before 3.5.1, and other products, allows user-assisted remote attackers to read arbitrary files via a crafted XML external entity (XXE) declaration and reference in an RDF document.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- 60799third-party-advisory
- 48526third-party-advisory
- 48479third-party-advisory
- GLSA-201408-19vendor-advisory
- GLSA-201209-05vendor-advisory
- 48494third-party-advisory
- 1026837vdb-entry
- MDVSA-2012:061vendor-advisory
- 52681vdb-entry
- FEDORA-2012-4663vendor-advisory
- 48529third-party-advisory
- 80307vdb-entry
- RHSA-2012:0410vendor-advisory
- [oss-security] 20120427 Fwd: CVE-2012-0037: libraptor - XXE in RDF/XML File Interpretation (Multiple office products affected)mailing-list
- MDVSA-2012:062vendor-advisory
- 48542third-party-advisory
- http://www.libreoffice.org/advisories/CVE-2012-0037/
- http://vsecurity.com/resources/advisory/20120324-1/
- 50692third-party-advisory
- http://blog.documentfoundation.org/2012/03/22/tdf-announces-libreoffice-3-4-6/
- 48649third-party-advisory
- openoffice-xml-info-disclosure(74235)vdb-entry
- DSA-2438vendor-advisory
- RHSA-2012:0411vendor-advisory
- 48493third-party-advisory
- FEDORA-2012-4629vendor-advisory
- MDVSA-2012:063vendor-advisory
- http://www.openoffice.org/security/cves/CVE-2012-0037.html
- http://librdf.org/raptor/RELEASE.html#rel2_0_7
- https://github.com/dajobe/raptor/commit/a676f235309a59d4aa78eeffd2574ae5d341fcb0
- [openoffice-commits] 20200305 svn commit: r1874832 - in /openoffice/ooo-site/trunk/content: download/checksums.html download/globalvars.js download/test/globalvars.js security/cves/CVE-2012-0037.html security/cves/CVE-2013-1571.htmlmailing-list
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.