CVE-2020-12802: remote graphics contained in docx format retrieved in 'stealth mode'
LibreOffice has a 'stealth mode' in which only documents from locations deemed 'trusted' are allowed to retrieve remote resources. This mode is not the default mode, but can be enabled by users who want to disable LibreOffice's ability to include remote resources within a document. A flaw existed where remote graphic links loaded from docx documents were omitted from this protection prior to version 6.4.4. This issue affects: The Document Foundation LibreOffice versions prior to 6.4.4.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2020-12802?
CVE-2020-12802 is a vulnerability in LibreOffice that allows remote resources to be included in a document even when the 'stealth mode' is enabled.
How does the 'stealth mode' in LibreOffice work?
The 'stealth mode' in LibreOffice allows only documents from trusted locations to retrieve remote resources.
Is CVE-2020-12802 a default mode in LibreOffice?
No, CVE-2020-12802 is not a default mode in LibreOffice but can be enabled by users who want to disable LibreOffice's ability to include remote resources within a document.
Which versions of LibreOffice are affected by CVE-2020-12802?
LibreOffice versions up to and excluding 6.4.4 are affected by CVE-2020-12802.
What is the severity of CVE-2020-12802?
CVE-2020-12802 has a severity value of 5.3, which is classified as medium.
What is the Common Weakness Enumeration (CWE) ID of CVE-2020-12802?
The CWE ID of CVE-2020-12802 is 200.