Vulnerability · Published Jan 7, 2025 · Assigned by Document Fdn.
CVE-2024-12425Path traversal leading to arbitrary .ttf file write
Low 2.4
In plain English
A low-severity path traversal in LibreOffice from The Document Foundation. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 25% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.
Official description
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in The Document Foundation LibreOffice allows Absolute Path Traversal. An attacker can write to arbitrary locations, albeit suffixed with ".ttf", by supplying a file in a format that supports embedded font files. This issue affects LibreOffice: from 24.8 before < 24.8.4.
Affected packages & fixed versions
| Ecosystem | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian:12 | libreoffice | 4:7.4.7-1+deb12u6 | DSA-5846-1 |
| Debian:12 | libreoffice | 4:7.4.7-1+deb12u6 | DEBIAN-CVE-2024-12425 |
| Debian:13 | libreoffice | 4:24.8.4-1 | DEBIAN-CVE-2024-12425 |
| Debian:14 | libreoffice | 4:24.8.4-1 | DEBIAN-CVE-2024-12425 |
| Ubuntu:22.04:LTS | libreoffice | 1:7.3.7-0ubuntu0.22.04.8 | USN-7228-1 |
| Ubuntu:22.04:LTS | libreoffice | 1:7.3.7-0ubuntu0.22.04.8 | UBUNTU-CVE-2024-12425 |
| Ubuntu:24.04:LTS | libreoffice | 4:24.2.7-0ubuntu0.24.04.2 | UBUNTU-CVE-2024-12425 |
| Ubuntu:24.04:LTS | libreoffice | 4:24.2.7-0ubuntu0.24.04.2 | USN-7228-1 |
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| The Document Foundation | LibreOffice | 24.8 – before < 24.8.4 |
Weakness: CWE-22 · Vector: CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N