Home > Vulnerability Database > CVE-2012-0037

Mend.io Vulnerability Database

CVE-2012-0037

Good to know:

Date: June 16, 2012

Redland Raptor (aka libraptor) before 2.0.7, as used by OpenOffice 3.3 and 3.4 Beta, LibreOffice before 3.4.6 and 3.5.x before 3.5.1, and other products, allows user-assisted remote attackers to read arbitrary files via a crafted XML external entity (XXE) declaration and reference in an RDF document.

Language: C

Severity Score

6.5

Related Resources (34)

Url: http://rhn.redhat.com/errata/RHSA-2012-0410.html

Url: https://lists.apache.org/thread.html/re0504f08000df786e51795940501e81a5d0ae981ecca68141e87ece0%40%3Ccommits.openoffice.apache.org%3E

Url: http://www.securityfocus.com/bid/52681

Url: http://www.osvdb.org/80307

Url: https://access.redhat.com/security/cve/CVE-2012-0037

Url: http://secunia.com/advisories/48479

Url: http://secunia.com/advisories/60799

Url: http://blog.documentfoundation.org/2012/03/22/tdf-announces-libreoffice-3-4-6/

Url: http://www.gentoo.org/security/en/glsa/glsa-201408-19.xml

Url: http://www.securitytracker.com/id?1026837

Url: http://www.openoffice.org/security/cves/CVE-2012-0037.html

Url: http://lists.fedoraproject.org/pipermail/package-announce/2012-April/077708.html

Url: http://secunia.com/advisories/48493

Url: http://secunia.com/advisories/48494

Url: http://secunia.com/advisories/50692

Url: https://nvd.nist.gov/vuln/detail/CVE-2012-0037

Url: http://www.debian.org/security/2012/dsa-2438

Url: http://secunia.com/advisories/48526

Url: http://security.gentoo.org/glsa/glsa-201209-05.xml

Url: http://lists.fedoraproject.org/pipermail/package-announce/2012-April/078242.html

Url: http://www.openwall.com/lists/oss-security/2012/03/27/4

Url: http://secunia.com/advisories/48649

Url: http://secunia.com/advisories/48529

Url: http://www.libreoffice.org/advisories/CVE-2012-0037/

Url: http://librdf.org/raptor/RELEASE.html#rel2_0_7

Url: https://github.com/dajobe/raptor/commit/a676f235309a59d4aa78eeffd2574ae5d341fcb0

Url: https://exchange.xforce.ibmcloud.com/vulnerabilities/74235

Url: http://www.mandriva.com/security/advisories?name=MDVSA-2012:063

Url: http://secunia.com/advisories/48542

Url: http://www.mandriva.com/security/advisories?name=MDVSA-2012:061

Url: http://vsecurity.com/resources/advisory/20120324-1/

Url: http://www.mandriva.com/security/advisories?name=MDVSA-2012:062

Url: http://rhn.redhat.com/errata/RHSA-2012-0411.html

Url: https://www.mend.io/vulnerability-database/CVE-2012-0037

Severity Score

6.5

Weakness Type (CWE)

Improper Restriction of XML External Entity Reference

CWE-611

Exposure of Sensitive Information to an Unauthorized Actor

CWE-200

CVSS v3.1

Base Score:	6.5
Attack Vector (AV):	NETWORK
Attack Complexity (AC):	LOW
Privileges Required (PR):	NONE
User Interaction (UI):	REQUIRED
Scope (S):	UNCHANGED
Confidentiality (C):	HIGH
Integrity (I):	NONE
Availability (A):	NONE

CVSS v2

Base Score:	4.3
Access Vector (AV):	NETWORK
Access Complexity (AC):	MEDIUM
Authentication (AU):	NONE
Confidentiality (C):	PARTIAL
Integrity (I):	NONE
Availability (A):	NONE
Additional information:

Mend.io Vulnerability Database

We found results for “”

CVE-2012-0037

Good to know:

Date: June 16, 2012

Language: C

Severity Score

Related Resources (34)

Severity Score

Weakness Type (CWE)

CVSS v3.1

CVSS v2

Do you need more information?