Not rated
CVE-2020-12802 LibreOffice has a 'stealth mode' in which only documents from locations deemed 'trusted' are allowed to retrieve…
Description
LibreOffice has a 'stealth mode' in which only documents from locations deemed 'trusted' are allowed to retrieve remote resources. This mode is not the default mode, but can be enabled by users who want to disable LibreOffice's ability to include remote resources within a document. A flaw existed where remote graphic links loaded from docx documents were omitted from this protection prior to version 6.4.4. This issue affects: The Document Foundation LibreOffice versions prior to 6.4.4.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| LibreOffice 6.4 | earliest → < 6.4.4 | 6.4.4 |
References
- www.libreoffice.org www.libreoffice.org
- FEDORA-2020-8922773bc4 lists.fedoraproject.org
- openSUSE-SU-2020:1222 lists.opensuse.org
- openSUSE-SU-2020:1261 lists.opensuse.org
- [debian-lts-announce] 20231231 [SECURITY] [DLA 3703-1] libreoffice security update lists.debian.org
Timeline
- Published
- Last modified
Other CVEs of LibreOffice
The 48 CVEs of LibreOffice →
CVE-2026-76181
Heap buffer overflow in dBASE index import
5.4
Medium
CVE-2026-63270
URLs could be constructed which expanded environment variable or INI file values, so potentially sensitive information…
6.7
Medium
CVE-2026-63269
LibreOffice can link to audio and video files from a document, and on Linux it plays them with GStreamer
6.7
Medium
CVE-2026-63268
LibreOffice Calc can link a cell range to an external data source, and the link is saved in the document
6.7
Medium