CVE-2012-0037: Infoleak
Redland Raptor (aka libraptor) before 2.0.7, as used by OpenOffice 3.3 and 3.4 Beta, LibreOffice before 3.4.6 and 3.5.x before 3.5.1, and other products, allows user-assisted remote attackers to read arbitrary files via a crafted XML external entity (XXE) declaration and reference in an RDF document.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2012-0037?
CVE-2012-0037 has been classified as a medium severity vulnerability.
How do I fix CVE-2012-0037?
To mitigate CVE-2012-0037, you should upgrade to a fixed version of the affected software, specifically to libraptor version 2.0.7 or later, or LibreOffice version 3.4.6 or later.
What products are affected by CVE-2012-0037?
CVE-2012-0037 affects several versions of OpenOffice, LibreOffice, and Redland Raptor software.
What type of attack is possible with CVE-2012-0037?
CVE-2012-0037 allows user-assisted remote attackers to read arbitrary files through a crafted XML external entity declaration.
Is CVE-2012-0037 related to XML vulnerabilities?
Yes, CVE-2012-0037 involves XML external entity (XXE) vulnerabilities, which can lead to information disclosure.