Graphic on-click binding allows unchecked script execution
Priority LOW 31CWE-356Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- None
- User interaction
- None
- Attack complexity
- Low
- Impact type
- Code execution
- Confidentiality · integrity · availability
- None · Low · Low
- Fix status
- Partial Red Hat: 4 fixed, 4 without a fix
Attack profile from CVSS 3.1 · CISA ADP. Fix status from CNA and Red Hat. Impact type from CWE-94.
Summary
Unchecked script execution in Graphic on-click binding in affected LibreOffice versions allows an attacker to create a document which without prompt will execute scripts built-into LibreOffice on clicking a graphic. Such scripts were previously deemed trusted but are now deemed untrusted.
Why it matters now
Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.01008 63rd percentileScored 2026-11-07
Fix Partial LibreOffice (The Document Foundation): 7.6.7, 24.2.3Red Hat: 2 advisoriesRed Hat: 4 fixed, 4 without a fix
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- None
- Automatable
- No
- Technical impact
- Partial
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| The Document Foundation | LibreOffice | 7.6 to before 7.6.7; 24.2 to before 24.2.3 | 7.6.7, 24.2.3 | Patch available | CNA |
- LibreOffice VendorThe Document Foundation Affected 7.6 to before 7.6.7; 24.2 to before 24.2.3 Fixed in 7.6.7, 24.2.3 Patch available CNA
CPE configurations NVD · 3
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:libreoffice:libreoffice:*:*:*:*:*:*:*:* | before 7.6.7.1; 24.2.0.0 to before 24.2.3.1 | Vulnerable | The Document Foundation |
| cpe:2.3:o:fedoraproject:fedora:39:*:*:*:*:*:*:* | 39 | Vulnerable | Fedoraproject |
| cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:* | 10.0 | Vulnerable | Debian |
- cpe:2.3:a:libreoffice:libreoffice:*:*:*:*:*:*:*:* Versions before 7.6.7.1; 24.2.0.0 to before 24.2.3.1 Vulnerable ·The Document Foundation
- cpe:2.3:o:fedoraproject:fedora:39:*:*:*:*:*:*:* Versions 39 Vulnerable ·Fedoraproject
- cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:* Versions 10.0 Vulnerable ·Debian
Remediation
- Fix · CNA LibreOffice (The Document Foundation) Fixed in 7.6.7, 24.2.3
Red Hat 2 advisories
- RHSA-2024:4755 Released 2024-07-23 · Red Hat rating Moderatelibreoffice security update
- Red Hat Enterprise Linux AppStream (v. 9) autocorr-af-1:7.1.8.1-13.el9_4, autocorr-bg-1:7.1.8.1-13.el9_4, autocorr-ca-1:7.1.8.1-13.el9_4 +47
- Red Hat Enterprise Linux CRB (v. 9) libreoffice-sdk-1:7.1.8.1-13.el9_4, libreoffice-sdk-doc-1:7.1.8.1-13.el9_4
- RHSA-2024:4242 Released 2024-07-02 · Red Hat rating Moderatelibreoffice security update
- Red Hat Enterprise Linux AppStream (v. 8) autocorr-af-1:6.4.7.2-17.el8_10, autocorr-bg-1:6.4.7.2-17.el8_10, autocorr-ca-1:6.4.7.2-17.el8_10 +47
- Red Hat Enterprise Linux CRB (v. 8) libreoffice-sdk-1:6.4.7.2-17.el8_10, libreoffice-sdk-doc-1:6.4.7.2-17.el8_10
Vendor assessments
Red Hat
Red Hat rating: Moderate. Red Hat's page for this CVE →
| Product | Status | Plan or fix |
|---|---|---|
| Red Hat Enterprise Linux 6 | Affected | No fix planned: Out of support scope |
| Red Hat Enterprise Linux 7 | Affected | No fix planned: Out of support scope |
| Red Hat Enterprise Linux 8 | Affected | No fix planned: Will not fix |
| Red Hat Enterprise Linux 9 | Affected | No fix planned: Will not fix |
| Red Hat Enterprise Linux AppStream (v. 8) | Fixed | RHSA-2024:4242 |
| Red Hat Enterprise Linux AppStream (v. 9) | Fixed | RHSA-2024:4755 |
| Red Hat Enterprise Linux CRB (v. 8) | Fixed | RHSA-2024:4242 |
| Red Hat Enterprise Linux CRB (v. 9) | Fixed | RHSA-2024:4755 |
Timeline
- 2026-10-02 Threatist record created from CVE-2024-3044
- 2026-10-03 Alias added: GHSA-3j7w-h2jh-289j
References
More The Document Foundation Libreoffice vulnerabilities
- TI-2019-07233 LibreLogo global-event script execution CVSS 3.1CRITICAL 9.8
- TI-2018-12068 Path traversal in [UNKNOWN] libreoffice CVSS 3.0CRITICAL 9.8
- TI-2018-07474 An information disclosure vulnerability occurs when LibreOffice 6.0.3 and Apache… CVSS 3.0HIGH 7.5
- TI-2019-07230 Code injection in Document Foundation LibreOffice CVSS 3.1CRITICAL 9.8
- TI-2018-05018 LibreOffice before 5.4.5 and 6.x before 6.0.1 allows remote attackers to read arbitrary… CVSS 3.0CRITICAL 9.8
- TI-2023-01118 Arbitrary file write in libreoffice CVSS 3.1MEDIUM 5.5
Sources
- CVE-2024-3044 · CVE Program
- CVE-2024-3044 · NVD
- FIRST EPSS
- GHSA-3j7w-h2jh-289j · GitHub Advisory Database · CC BY 4.0
- CVE-2024-3044 · Red Hat security data · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences