Back
CVE-2012-0037
Redland Raptor (aka libraptor) before 2.0.7, as used by OpenOffice 3.3 and 3.4 Beta, LibreOffice before 3.4.6 and 3.5.x before 3.5.1, and…
Medium6.5EPSS 13.5%
- Published
- Updated
- Reserved
- Assigned by
- redhat
Description
Redland Raptor (aka libraptor) before 2.0.7, as used by OpenOffice 3.3 and 3.4 Beta, LibreOffice before 3.4.6 and 3.5.x before 3.5.1, and other products, allows user-assisted remote attackers to read arbitrary files via a crafted XML external entity (XXE) declaration and reference in an RDF document.
Scores
| Scored by | CVSS | Score | Vector |
|---|---|---|---|
| NVDNVD · Modified | 3.1 | Medium6.5 | CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N |
- EPSS (exploitation in 30 days)
- 13.5% · top 3.5% of all CVEs (2 Nov 2026)
Loading the EPSS history…
The list uses the assigner's score when there is one, then CISA's, then NVD's: Medium 6.5.
Weakness
Affected products
n/a
- affected n/a
References (31)
- 60799 (opens in a new tab)third-party-advisoryx_refsource_SECUNIAx_transferred
- 48526 (opens in a new tab)third-party-advisoryx_refsource_SECUNIAx_transferred
- 48479 (opens in a new tab)third-party-advisoryx_refsource_SECUNIAx_transferred
- GLSA-201408-19 (opens in a new tab)vendor-advisoryx_refsource_GENTOOx_transferred
- GLSA-201209-05 (opens in a new tab)vendor-advisoryx_refsource_GENTOOx_transferred
- 48494 (opens in a new tab)third-party-advisoryx_refsource_SECUNIAx_transferred
- 1026837 (opens in a new tab)vdb-entryx_refsource_SECTRACKx_transferred
- MDVSA-2012:061 (opens in a new tab)vendor-advisoryx_refsource_MANDRIVAx_transferred
- 52681 (opens in a new tab)vdb-entryx_refsource_BIDx_transferred
- FEDORA-2012-4663 (opens in a new tab)vendor-advisoryx_refsource_FEDORAx_transferred
- 48529 (opens in a new tab)third-party-advisoryx_refsource_SECUNIAx_transferred
- 80307 (opens in a new tab)vdb-entryx_refsource_OSVDBx_transferred
- RHSA-2012:0410 (opens in a new tab)vendor-advisoryx_refsource_REDHATx_transferred
- [oss-security] 20120427 Fwd: CVE-2012-0037: libraptor - XXE in RDF/XML File Interpretation (Multiple office products affected) (opens in a new tab)mailing-listx_refsource_MLISTx_transferred
- MDVSA-2012:062 (opens in a new tab)vendor-advisoryx_refsource_MANDRIVAx_transferred
- 48542 (opens in a new tab)third-party-advisoryx_refsource_SECUNIAx_transferred
- http://www.libreoffice.org/advisories/CVE-2012-0037/ (opens in a new tab)x_refsource_CONFIRMx_transferred
- http://vsecurity.com/resources/advisory/20120324-1/ (opens in a new tab)x_refsource_MISCx_transferred
- 50692 (opens in a new tab)third-party-advisoryx_refsource_SECUNIAx_transferred
- http://blog.documentfoundation.org/2012/03/22/tdf-announces-libreoffice-3-4-6/ (opens in a new tab)x_refsource_CONFIRMx_transferred
- 48649 (opens in a new tab)third-party-advisoryx_refsource_SECUNIAx_transferred
- openoffice-xml-info-disclosure(74235) (opens in a new tab)vdb-entryx_refsource_XFx_transferred
- DSA-2438 (opens in a new tab)vendor-advisoryx_refsource_DEBIANx_transferred
- RHSA-2012:0411 (opens in a new tab)vendor-advisoryx_refsource_REDHATx_transferred
- 48493 (opens in a new tab)third-party-advisoryx_refsource_SECUNIAx_transferred
- FEDORA-2012-4629 (opens in a new tab)vendor-advisoryx_refsource_FEDORAx_transferred
- MDVSA-2012:063 (opens in a new tab)vendor-advisoryx_refsource_MANDRIVAx_transferred
- http://www.openoffice.org/security/cves/CVE-2012-0037.html (opens in a new tab)x_refsource_CONFIRMx_transferred
- http://librdf.org/raptor/RELEASE.html#rel2_0_7 (opens in a new tab)x_refsource_CONFIRMx_transferred
- https://github.com/dajobe/raptor/commit/a676f235309a59d4aa78eeffd2574ae5d341fcb0 (opens in a new tab)x_refsource_CONFIRMx_transferred
- [openoffice-commits] 20200305 svn commit: r1874832 - in /openoffice/ooo-site/trunk/content: download/checksums.html download/globalvars.js download/test/globalvars.js security/cves/CVE-2012-0037.html security/cves/CVE-2013-1571.html (opens in a new tab)mailing-listx_refsource_MLISTx_transferred
Sources
The same CVE in the primary databases and aggregators, to check against.
- CVE.org record (opens in a new tab)
- CVE List JSON (GitHub) (opens in a new tab)
- NVD (opens in a new tab)
- FIRST EPSS (opens in a new tab)
- OSV.dev (opens in a new tab)
- GitHub Advisories (opens in a new tab)
- CIRCL Vulnerability-Lookup (opens in a new tab)
Record last updated .