CVE-2024-6472: Ability to trust not validated macro signatures removed in high security mode
Certificate Validation user interface in LibreOffice allows potential vulnerability. Signed macros are scripts that have been digitally signed by the developer using a cryptographic signature. When a document with a signed macro is opened a warning is displayed by LibreOffice before the macro is executed. Previously if verification failed the user could fail to understand the failure and choose to enable the macros anyway. This issue affects LibreOffice: from 24.2 before 24.2.5.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-6472?
CVE-2024-6472 has been rated as a medium severity vulnerability.
How do I fix CVE-2024-6472?
To fix CVE-2024-6472, update LibreOffice to the latest version specified in the security advisory.
Which versions of LibreOffice are affected by CVE-2024-6472?
CVE-2024-6472 affects multiple versions of LibreOffice including 1:6.4.7 and 1:7.3.7 for Ubuntu and various versions for Debian.
Is my system vulnerable to CVE-2024-6472?
You can determine if your system is vulnerable to CVE-2024-6472 by checking the installed version of LibreOffice against the affected versions.
What does CVE-2024-6472 impact?
CVE-2024-6472 impacts the certificate validation user interface, potentially allowing attackers to exploit signed macros.