CVE-2014-0247
libreoffice: VBA macros executed unconditionally
Severity
ModerateRed Hat Product Security
CVSS 2.0
Review impact separately from score.
Published · June 23, 2014
Updated · June 27, 2026
Description
It was found that LibreOffice documents executed macros unconditionally, without user approval, when these documents were opened using LibreOffice. An attacker could use this flaw to execute arbitrary code as the user running LibreOffice by embedding malicious VBA scripts in the document as macros.
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CVSS 2.0 · 5.8AV:N/AC:M/Au:N/C:P/I:P/A:N
CWE-356 · Product UI does not Warn User of Unsafe Actions