CVE-2012-0037

Redland Raptor (aka libraptor) before 2.0.7, as used by OpenOffice 3.3 and 3.4 Beta, LibreOffice before 3.4.6 and 3.5.x before 3.5.1, and other products, allows user-assisted remote attackers to read arbitrary files via a crafted XML external entity (XXE) declaration and reference in an RDF document.

🔗 References (62)

• secalert@redhathttp://blog.documentfoundation.org/2012/03/22/tdf-announces-libreoffice-3-4-6/
• secalert@redhathttp://librdf.org/raptor/RELEASE.html#rel2_0_7
• secalert@redhathttp://lists.fedoraproject.org/pipermail/package-announce/2012-April/077708.html
• secalert@redhathttp://lists.fedoraproject.org/pipermail/package-announce/2012-April/078242.html
• secalert@redhathttp://rhn.redhat.com/errata/RHSA-2012-0410.html
• secalert@redhathttp://rhn.redhat.com/errata/RHSA-2012-0411.html
• secalert@redhathttp://secunia.com/advisories/48479
• secalert@redhathttp://secunia.com/advisories/48493
• secalert@redhathttp://secunia.com/advisories/48494
• secalert@redhathttp://secunia.com/advisories/48526
• secalert@redhathttp://secunia.com/advisories/48529
• secalert@redhathttp://secunia.com/advisories/48542
• secalert@redhathttp://secunia.com/advisories/48649
• secalert@redhathttp://secunia.com/advisories/50692
• secalert@redhathttp://secunia.com/advisories/60799