CVE - CVE-2012-0037

CVE-ID
CVE-2012-0037	Learn more at National Vulnerability Database (NVD) • CVSS Severity Rating • Fix Information • Vulnerable Software Versions • SCAP Mappings • CPE Information
Description
Redland Raptor (aka libraptor) before 2.0.7, as used by OpenOffice 3.3 and 3.4 Beta, LibreOffice before 3.4.6 and 3.5.x before 3.5.1, and other products, allows user-assisted remote attackers to read arbitrary files via a crafted XML external entity (XXE) declaration and reference in an RDF document.
References
Note: References are provided for the convenience of the reader to help distinguish between vulnerabilities. The list is not intended to be complete.
MISC:1026837 URL:http://www.securitytracker.com/id?1026837 MISC:48479 URL:http://secunia.com/advisories/48479 MISC:48493 URL:http://secunia.com/advisories/48493 MISC:48494 URL:http://secunia.com/advisories/48494 MISC:48526 URL:http://secunia.com/advisories/48526 MISC:48529 URL:http://secunia.com/advisories/48529 MISC:48542 URL:http://secunia.com/advisories/48542 MISC:48649 URL:http://secunia.com/advisories/48649 MISC:50692 URL:http://secunia.com/advisories/50692 MISC:52681 URL:http://www.securityfocus.com/bid/52681 MISC:60799 URL:http://secunia.com/advisories/60799 MISC:80307 URL:~~http://www.osvdb.org/80307~~ (Obsolete source) MISC:DSA-2438 URL:http://www.debian.org/security/2012/dsa-2438 MISC:FEDORA-2012-4629 URL:http://lists.fedoraproject.org/pipermail/package-announce/2012-April/077708.html MISC:FEDORA-2012-4663 URL:http://lists.fedoraproject.org/pipermail/package-announce/2012-April/078242.html MISC:GLSA-201209-05 URL:http://security.gentoo.org/glsa/glsa-201209-05.xml MISC:GLSA-201408-19 URL:http://www.gentoo.org/security/en/glsa/glsa-201408-19.xml MISC:MDVSA-2012:061 URL:~~http://www.mandriva.com/security/advisories?name=MDVSA-2012:061~~ (Obsolete source) MISC:MDVSA-2012:062 URL:~~http://www.mandriva.com/security/advisories?name=MDVSA-2012:062~~ (Obsolete source) MISC:MDVSA-2012:063 URL:~~http://www.mandriva.com/security/advisories?name=MDVSA-2012:063~~ (Obsolete source) MISC:RHSA-2012:0410 URL:http://rhn.redhat.com/errata/RHSA-2012-0410.html MISC:RHSA-2012:0411 URL:http://rhn.redhat.com/errata/RHSA-2012-0411.html MISC:[openoffice-commits] 20200305 svn commit: r1874832 - in /openoffice/ooo-site/trunk/content: download/checksums.html download/globalvars.js download/test/globalvars.js security/cves/CVE-2012-0037.html security/cves/CVE-2013-1571.html URL:https://lists.apache.org/thread.html/re0504f08000df786e51795940501e81a5d0ae981ecca68141e87ece0%40%3Ccommits.openoffice.apache.org%3E MISC:[oss-security] 20120427 Fwd: CVE-2012-0037: libraptor - XXE in RDF/XML File Interpretation (Multiple office products affected) URL:http://www.openwall.com/lists/oss-security/2012/03/27/4 MISC:http://blog.documentfoundation.org/2012/03/22/tdf-announces-libreoffice-3-4-6/ URL:http://blog.documentfoundation.org/2012/03/22/tdf-announces-libreoffice-3-4-6/ MISC:http://librdf.org/raptor/RELEASE.html#rel2_0_7 URL:http://librdf.org/raptor/RELEASE.html#rel2_0_7 MISC:http://vsecurity.com/resources/advisory/20120324-1/ URL:http://vsecurity.com/resources/advisory/20120324-1/ MISC:http://www.libreoffice.org/advisories/CVE-2012-0037/ URL:http://www.libreoffice.org/advisories/CVE-2012-0037/ MISC:http://www.openoffice.org/security/cves/CVE-2012-0037.html URL:http://www.openoffice.org/security/cves/CVE-2012-0037.html MISC:https://github.com/dajobe/raptor/commit/a676f235309a59d4aa78eeffd2574ae5d341fcb0 URL:https://github.com/dajobe/raptor/commit/a676f235309a59d4aa78eeffd2574ae5d341fcb0 MISC:openoffice-xml-info-disclosure(74235) URL:https://exchange.xforce.ibmcloud.com/vulnerabilities/74235
Assigning CNA
Red Hat, Inc.
Date Record Created
20111207	Disclaimer: The record creation date may reflect when the CVE ID was allocated or reserved, and does not necessarily indicate when this vulnerability was discovered, shared with the affected vendor, publicly disclosed, or updated in CVE.
Phase (Legacy)
Assigned (20111207)
Votes (Legacy)

Comments (Legacy)

Proposed (Legacy)
N/A
This is an record on the CVE List, which provides common identifiers for publicly known cybersecurity vulnerabilities.
Search CVE Using Keywords: You can also search by reference using the CVE Reference Maps.
For More Information: CVE Request Web Form (select "Other" from dropdown)