{"id":"CVE-2012-5639","aliases":["DEBIAN-CVE-2012-5639","EUVD-2012-5523","GHSA-rvg2-vh9m-cq32","UBUNTU-CVE-2012-5639"],"status":"published","title":"LibreOffice and OpenOffice automatically open embedded content","description":"LibreOffice and OpenOffice automatically open embedded content","severity":{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-07","score":0.05837,"percentile":0.93215,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-20","CWE-668"],"published":"2019-12-20T13:55:44Z","modified":"2026-10-23T18:02:54Z","affected":[{"source":"osv","ecosystem":"Debian:12","package":"libreoffice","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4:24.2.0-1","4:24.2.0-1~bpo12+1","4:24.2.0-2","4:24.2.0-3","4:24.2.0~alpha1-1","4:24.2.0~beta1-1","4:24.2.0~rc1-1","4:24.2.0~rc1-2","4:24.2.0~rc2-1","4:24.2.0~rc2-2","4:24.2.0~rc2-2~bpo12+1","4:24.2.1-1","4:24.2.1-2","4:24.2.1-3","4:24.2.1-4","4:24.2.1~rc1-1","4:24.2.1~rc2-1","4:24.2.2-1","4:24.2.2-2","4:24.2.2-3","4:24.2.2~rc1-1","4:24.2.2~rc1-2","4:24.2.2~rc2-1","4:24.2.2~rc2-2","4:24.2.3-1","4:24.2.3-1~bpo12+1","4:24.2.3-2","4:24.2.3~rc1-1","4:24.2.3~rc1-2","4:24.2.3~rc1-3","4:24.2.3~rc2-1","4:24.2.4-1","4:24.2.4-1~bpo12+1","4:24.2.5-1","4:24.2.5-1~bpo12+1","4:24.2.5-2","4:24.2.5-3","4:24.2.5-4","4:24.2.6-1","4:24.2.6-2","4:24.2.6-2~bpo12+1","4:24.8.0~alpha1-1","4:24.8.0~alpha1-2","4:24.8.0~alpha1-3","4:24.8.0~alpha1-4","4:24.8.0~beta1-1","4:24.8.0~rc1-1","4:24.8.0~rc2-1","4:24.8.0~rc3-1","4:24.8.0~rc3-2","4:24.8.1-1","4:24.8.1-2","4:24.8.1~rc1-1","4:24.8.2-1","4:24.8.2-1~bpo12+1","4:24.8.2-2","4:24.8.2~rc1-1","4:24.8.3-1","4:24.8.3-1~bpo12+1","4:24.8.3-2","4:24.8.3-3","4:24.8.4-1","4:24.8.4-1~bpo12+1","4:24.8.4-2","4:24.8.4-3","4:24.8.4-4","4:24.8.5-1","4:24.8.5-2","4:24.8.5-2~bpo12+1","4:24.8.5-2~bpo12+2","4:25.2.0~alpha1-1","4:25.2.0~beta1-1","4:25.2.0~beta1-2","4:25.2.0~rc1-1","4:25.2.0~rc1-2","4:25.2.0~rc1-3","4:25.2.0~rc1-4","4:25.2.0~rc2-1","4:25.2.0~rc3-1","4:25.2.0~rc3-2","4:25.2.1-1","4:25.2.1-2","4:25.2.1-3","4:25.2.1-3~bpo12+1","4:25.2.1~rc1-1","4:25.2.1~rc1-2","4:25.2.1~rc2-1","4:25.2.2-1","4:25.2.2-1~bpo12+1","4:25.2.2-2","4:25.2.2-3","4:25.2.2-3~bpo12+1","4:25.2.2~rc1-1","4:25.2.2~rc2-1","4:25.2.3-1","4:25.2.3-2","4:25.2.3-2~bpo12+1","4:25.2.3~rc1-1","4:25.2.3~rc1-2","4:25.2.3~rc2-1","4:25.8.0-1","4:25.8.0-1~bpo13+1","4:25.8.0~alpha1-1","4:25.8.0~alpha1-2","4:25.8.0~beta1-1","4:25.8.0~rc1-1","4:25.8.0~rc1-2","4:25.8.0~rc2-1","4:25.8.0~rc2-2","4:25.8.0~rc3-1","4:25.8.0~rc4-1","4:25.8.0~rc4-2","4:25.8.1-1","4:25.8.1-1~bpo13+1","4:25.8.1~rc1-1","4:25.8.2-1","4:25.8.2-2","4:25.8.2-3","4:25.8.2-3~bpo13+1","4:25.8.2~rc1-1","4:25.8.2~rc2-1","4:25.8.3-1","4:25.8.3-1+ports","4:25.8.3-1~bpo13+1","4:25.8.3~rc1-1","4:25.8.3~rc2-1","4:25.8.4-1","4:25.8.4-1~bpo13+1","4:26.2.0-1","4:26.2.0-1~bpo13+1","4:26.2.0~alpha1-1","4:26.2.0~alpha1-2","4:26.2.0~alpha1-3","4:26.2.0~beta1-1","4:26.2.0~rc1-1","4:26.2.0~rc2-1","4:26.2.0~rc3-1","4:26.2.1-1","4:26.2.1-1~bpo13+1","4:26.2.1~rc1-1","4:26.2.1~rc2-1","4:26.2.2.1-1","4:26.2.2.1-2","4:26.2.2.2-1","4:26.2.2.2-2","4:26.2.2.2-3","4:26.2.2.2-3~bpo13+1","4:26.2.3.1-1","4:26.2.3.2-1","4:26.2.3.2-2","4:26.2.3.2-2~bpo13+1","4:26.2.4.1-1","4:26.2.4.2-1","4:26.2.4.2-1~bpo13+1","4:26.2.4.2-2","4:26.2.5.2-1","4:26.2.5.2-2","4:26.2.5.2-2~bpo13+1","4:26.8.0.0.alpha1-1","4:26.8.0.0.alpha1-2","4:26.8.0.0.alpha1-3","4:26.8.0.0.alpha1-4","4:26.8.0.0.beta1-1","4:26.8.0.1-1","4:26.8.0.2-1","4:26.8.0.3-1","4:26.8.0.3-2","4:26.8.0.3-2~bpo13+1","4:26.8.1.1-1","4:26.8.1.1-2","4:26.8.1.1-3","4:26.8.1.1-3~bpo13+1","4:26.8.1.1-3~bpo13+2","4:26.8.2.1-1","4:26.8.2.1-2","4:7.4.5-3","4:7.4.7-1","4:7.4.7-1+deb12u1","4:7.4.7-1+deb12u10","4:7.4.7-1+deb12u11","4:7.4.7-1+deb12u12","4:7.4.7-1+deb12u13","4:7.4.7-1+deb12u14","4:7.4.7-1+deb12u1~bpo11+1","4:7.4.7-1+deb12u2","4:7.4.7-1+deb12u2~bpo11+1","4:7.4.7-1+deb12u3","4:7.4.7-1+deb12u4","4:7.4.7-1+deb12u5","4:7.4.7-1+deb12u6","4:7.4.7-1+deb12u7","4:7.4.7-1+deb12u8","4:7.4.7-1+deb12u9","4:7.4.7-1~bpo11+1","4:7.5.0~rc2-7","4:7.5.0~rc3-1","4:7.5.1~rc1-1","4:7.5.1~rc2-1","4:7.5.2~rc1-1","4:7.5.2~rc2-1","4:7.5.3~rc1-1","4:7.5.3~rc2-1","4:7.5.4-1","4:7.5.4-2","4:7.5.4-3","4:7.5.4-4","4:7.5.4~rc1-1","4:7.5.4~rc1-2","4:7.5.4~rc1-3","4:7.5.4~rc1-4","4:7.5.4~rc2-1","4:7.5.5-1","4:7.5.5-2","4:7.5.5-3","4:7.5.5-3~bpo12+1","4:7.5.5-4","4:7.5.5-4~bpo12+1","4:7.5.5~rc1-1","4:7.5.5~rc1-2","4:7.5.5~rc1-3","4:7.5.5~rc1-4","4:7.5.5~rc1-5","4:7.5.5~rc2-1","4:7.5.6-1","4:7.5.6-1~bpo12+1","4:7.5.7-1","4:7.5.8-1","4:7.5.8-1~bpo12+1","4:7.5.8~rc1-1","4:7.5.8~rc1-2","4:7.5.9~rc1-1","4:7.5.9~rc1-1~bpo12+1","4:7.5.9~rc1-1~bpo12+2","4:7.6.0~rc1-1","4:7.6.0~rc1-2","4:7.6.0~rc2-1","4:7.6.0~rc2-2","4:7.6.0~rc3-1","4:7.6.1~rc1-1","4:7.6.1~rc2-1","4:7.6.1~rc2-2","4:7.6.2-1","4:7.6.2-2","4:7.6.2-3","4:7.6.2-4","4:7.6.2-5","4:7.6.3-1","4:7.6.3-2","4:7.6.3~rc1-1","4:7.6.3~rc1-2","4:7.6.3~rc2-1","4:7.6.3~rc2-2","4:7.6.4~rc1-1","4:7.6.4~rc1-1~bpo12+1"]},{"source":"osv","ecosystem":"Debian:13","package":"libreoffice","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4:25.2.3-2","4:25.2.3-2+deb13u1","4:25.2.3-2+deb13u2","4:25.2.3-2+deb13u2~bpo12+1","4:25.2.3-2+deb13u3","4:25.2.3-2+deb13u3~bpo12+1","4:25.2.3-2+deb13u4","4:25.2.3-2+deb13u5","4:25.2.3-2+deb13u5~bpo12+1","4:25.2.3-2+deb13u6","4:25.2.3-2+deb13u7","4:25.2.3-2+deb13u8","4:25.8.0-1","4:25.8.0-1~bpo13+1","4:25.8.0~alpha1-1","4:25.8.0~alpha1-2","4:25.8.0~beta1-1","4:25.8.0~rc1-1","4:25.8.0~rc1-2","4:25.8.0~rc2-1","4:25.8.0~rc2-2","4:25.8.0~rc3-1","4:25.8.0~rc4-1","4:25.8.0~rc4-2","4:25.8.1-1","4:25.8.1-1~bpo13+1","4:25.8.1~rc1-1","4:25.8.2-1","4:25.8.2-2","4:25.8.2-3","4:25.8.2-3~bpo13+1","4:25.8.2~rc1-1","4:25.8.2~rc2-1","4:25.8.3-1","4:25.8.3-1+ports","4:25.8.3-1~bpo13+1","4:25.8.3~rc1-1","4:25.8.3~rc2-1","4:25.8.4-1","4:25.8.4-1~bpo13+1","4:26.2.0-1","4:26.2.0-1~bpo13+1","4:26.2.0~alpha1-1","4:26.2.0~alpha1-2","4:26.2.0~alpha1-3","4:26.2.0~beta1-1","4:26.2.0~rc1-1","4:26.2.0~rc2-1","4:26.2.0~rc3-1","4:26.2.1-1","4:26.2.1-1~bpo13+1","4:26.2.1~rc1-1","4:26.2.1~rc2-1","4:26.2.2.1-1","4:26.2.2.1-2","4:26.2.2.2-1","4:26.2.2.2-2","4:26.2.2.2-3","4:26.2.2.2-3~bpo13+1","4:26.2.3.1-1","4:26.2.3.2-1","4:26.2.3.2-2","4:26.2.3.2-2~bpo13+1","4:26.2.4.1-1","4:26.2.4.2-1","4:26.2.4.2-1~bpo13+1","4:26.2.4.2-2","4:26.2.5.2-1","4:26.2.5.2-2","4:26.2.5.2-2~bpo13+1","4:26.8.0.0.alpha1-1","4:26.8.0.0.alpha1-2","4:26.8.0.0.alpha1-3","4:26.8.0.0.alpha1-4","4:26.8.0.0.beta1-1","4:26.8.0.1-1","4:26.8.0.2-1","4:26.8.0.3-1","4:26.8.0.3-2","4:26.8.0.3-2~bpo13+1","4:26.8.1.1-1","4:26.8.1.1-2","4:26.8.1.1-3","4:26.8.1.1-3~bpo13+1","4:26.8.1.1-3~bpo13+2","4:26.8.2.1-1","4:26.8.2.1-2"]},{"source":"osv","ecosystem":"Debian:14","package":"libreoffice","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4:25.2.3-2","4:25.8.0-1","4:25.8.0-1~bpo13+1","4:25.8.0~alpha1-1","4:25.8.0~alpha1-2","4:25.8.0~beta1-1","4:25.8.0~rc1-1","4:25.8.0~rc1-2","4:25.8.0~rc2-1","4:25.8.0~rc2-2","4:25.8.0~rc3-1","4:25.8.0~rc4-1","4:25.8.0~rc4-2","4:25.8.1-1","4:25.8.1-1~bpo13+1","4:25.8.1~rc1-1","4:25.8.2-1","4:25.8.2-2","4:25.8.2-3","4:25.8.2-3~bpo13+1","4:25.8.2~rc1-1","4:25.8.2~rc2-1","4:25.8.3-1","4:25.8.3-1+ports","4:25.8.3-1~bpo13+1","4:25.8.3~rc1-1","4:25.8.3~rc2-1","4:25.8.4-1","4:25.8.4-1~bpo13+1","4:26.2.0-1","4:26.2.0-1~bpo13+1","4:26.2.0~alpha1-1","4:26.2.0~alpha1-2","4:26.2.0~alpha1-3","4:26.2.0~beta1-1","4:26.2.0~rc1-1","4:26.2.0~rc2-1","4:26.2.0~rc3-1","4:26.2.1-1","4:26.2.1-1~bpo13+1","4:26.2.1~rc1-1","4:26.2.1~rc2-1","4:26.2.2.1-1","4:26.2.2.1-2","4:26.2.2.2-1","4:26.2.2.2-2","4:26.2.2.2-3","4:26.2.2.2-3~bpo13+1","4:26.2.3.1-1","4:26.2.3.2-1","4:26.2.3.2-2","4:26.2.3.2-2~bpo13+1","4:26.2.4.1-1","4:26.2.4.2-1","4:26.2.4.2-1~bpo13+1","4:26.2.4.2-2","4:26.2.5.2-1","4:26.2.5.2-2","4:26.2.5.2-2~bpo13+1","4:26.8.0.0.alpha1-1","4:26.8.0.0.alpha1-2","4:26.8.0.0.alpha1-3","4:26.8.0.0.alpha1-4","4:26.8.0.0.beta1-1","4:26.8.0.1-1","4:26.8.0.2-1","4:26.8.0.3-1","4:26.8.0.3-2","4:26.8.0.3-2~bpo13+1","4:26.8.1.1-1","4:26.8.1.1-2","4:26.8.1.1-3","4:26.8.1.1-3~bpo13+1","4:26.8.1.1-3~bpo13+2","4:26.8.2.1-1","4:26.8.2.1-2"]}],"products":[{"vendor":"apache","product":"openoffice"},{"vendor":"debian","product":"debian_linux"},{"vendor":"libreoffice","product":"libreoffice"},{"vendor":"libreoffice; openoffice","product":"libreoffice, openoffice"}],"references":[{"url":"https://security-tracker.debian.org/tracker/CVE-2012-5639","tags":["x_refsource_MISC","x_transferred","Third Party Advisory","advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2012-5639","tags":["x_refsource_MISC","x_transferred","Issue Tracking","Third Party Advisory","advisory","report"]},{"url":"http://www.openwall.com/lists/oss-security/2012/12/14/1","tags":["x_refsource_MISC","x_transferred","Mailing List","Third Party Advisory","advisory","article"]},{"url":"https://access.redhat.com/security/cve/cve-2012-5639","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Third Party Advisory","advisory"]},{"url":"https://lists.apache.org/thread.html/r253f92d0e6511d07a79774002e1d9db1d20b24bff27914a5adb14ccb%40%3Cissues.openoffice.apache.org%3E","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"http://www.openwall.com/lists/oss-security/2023/12/28/6","tags":["x_transferred","web"]},{"url":"http://www.openwall.com/lists/oss-security/2024/01/03/6","tags":["x_transferred","web"]},{"url":"http://www.openwall.com/lists/oss-security/2024/01/03/7","tags":["x_transferred","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2012-5639"},{"url":"https://lists.apache.org/thread.html/r253f92d0e6511d07a79774002e1d9db1d20b24bff27914a5adb14ccb@%3Cissues.openoffice.apache.org%3E"},{"url":"https://github.com/advisories/GHSA-rvg2-vh9m-cq32"},{"url":"https://ubuntu.com/security/CVE-2012-5639","tags":["report"]},{"url":"http://www.openwall.com/lists/oss-security/2012/12/13","tags":["report"]},{"url":"http://www.openwall.com/lists/oss-security/2012/12/13/10","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2012-5639","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2012-5639","description":"LibreOffice and OpenOffice automatically open embedded content","status":"published","published":"2019-12-20T13:55:44Z","modified":"2025-02-13T16:27:10.221Z","updated_at":"2026-11-02T14:34:49.246229Z"}],"euvd":[{"id":"EUVD-2012-5523","description":"LibreOffice and OpenOffice automatically open embedded content","status":"published","published":"2019-12-20T13:55:44Z","modified":"2025-02-13T16:27:10Z","updated_at":"2026-11-03T00:03:53.290549Z"}],"ghsa":[{"id":"GHSA-rvg2-vh9m-cq32","title":"LibreOffice and OpenOffice automatically open embedded content","description":"LibreOffice and OpenOffice automatically open embedded content","status":"published","published":"2022-04-23T00:40:25Z","modified":"2024-01-12T05:08:21Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","level":"medium"}],"cwes":["CWE-20","CWE-668"],"updated_at":"2026-11-02T14:55:24.003446Z"}],"nvd":[{"id":"CVE-2012-5639","description":"LibreOffice and OpenOffice automatically open embedded content","status":"published","published":"2019-12-20T14:15:11.4Z","modified":"2026-06-16T23:47:08.16Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","level":"medium","assessor":"primary"},{"version":"2.0","score":4.3,"vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-668"],"updated_at":"2026-11-02T14:02:18.043773Z"}],"osv":[{"id":"CVE-2012-5639","description":"LibreOffice and OpenOffice automatically open embedded content","status":"published","published":"2019-12-20T14:15:11Z","modified":"2026-04-21T07:56:45.749881174Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T15:43:58.802805Z"},{"id":"DEBIAN-CVE-2012-5639","description":"LibreOffice and OpenOffice automatically open embedded content","status":"published","published":"2019-12-20T14:15:11.4Z","modified":"2026-10-23T18:02:54.014132784Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T15:45:25.218101Z"},{"id":"UBUNTU-CVE-2012-5639","description":"LibreOffice and OpenOffice automatically open embedded content","status":"withdrawn","published":"2019-12-20T14:15:00Z","modified":"2025-07-16T08:10:37.777313Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T15:54:06.854805Z"}]}}