CVE-2014-0247

Publication date 23 June 2014

Last updated 24 July 2024

Ubuntu priority

LibreOffice 4.2.4 executes unspecified VBA macros automatically, which has unspecified impact and attack vectors, possibly related to doc/docmacromode.cxx.

Read the notes from the security team

Status

Show unmaintained releases

Package	Ubuntu Release	Status
libreoffice	14.04 LTS trusty	Fixed 1:4.2.4-0ubuntu2
	13.10 saucy	Ignored
	12.04 LTS precise	Not affected
	10.04 LTS lucid	Not in release

Notes

mdeslaur

4.x only Due to the size of libreoffice, and the non-critical nature of this issue, we are not going to release an update for Ubuntu 13.10 users before its EoL date

Patch details

For informational purposes only. We recommend not to cherry-pick updates. How can I get the fixes?

Package	Patch details
libreoffice	Upstream: https://gerrit.libreoffice.org/gitweb?p=core.git;a=commit;h=1b0402f87c9b17fef2141130bfaa1798ece6ba0d

References

Related Ubuntu Security Notices (USN)

USN-2253-1
LibreOffice vulnerability
23 June 2014

Other references

https://www.cve.org/CVERecord?id=CVE-2014-0247