CVE-2012-5639: apache openoffice Exposure of Resource to Wrong Sphere
CVSS: 6.5v3.1MediumModified
AliasesUBUNTU-CVE-2012-5639DEBIAN-CVE-2012-5639CGA-3c6r-8fj5-c367CGA-3v6f-wx35-h98hCGA-5j78-489w-248vCGA-6pw5-6pg9-675mCGA-7364-7959-7cx7CGA-75pq-96hc-qx24CGA-7p4m-qp96-9wp7CGA-967c-47gp-844fCGA-9jcv-2qr2-g6vvCGA-w433-wwr2-jqq7CGA-x7x4-6qxh-jj7fCGA-xj67-8qg6-xmqv
Published 20-12-2019Last modified 13-02-2025
Vulnerability summary
CVE-2012-5639 is a medium (CVSS 6.5) Exposure of Resource to Wrong Sphere vulnerability in apache openoffice. EPSS estimates a 5.84% chance of exploitation in the next 30 days, higher than 93% of scored vulnerabilities.
CVSS score
6.5/10
010
Medium · v3.1 (NVD)EPSS score
5.84%
0%100%
Low · 0.00 pp in 30 daysKEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded
Advisory lineage
Upstream 0 · Downstream 0 · Related 4Timeline
- 20-12-2019PublishedVulnerability first disclosed.
- 13-02-2025Last modifiedVulnerability information updated.
Description
LibreOffice and OpenOffice automatically open embedded content
CVSS metrics
6 scores · 5 sources · 2 versionsMedium 6.5Preferred score · NVD (NIST)
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:NSourcesAll 5 agree
- OSV · UbuntuEcosystem advisory · calculated6.5MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
- OSV · DebianEcosystem advisory · calculated6.5MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
- OSV · WolfiEcosystem advisory · calculated6.5MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
- OSV · ChainguardEcosystem advisory · calculated6.5MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
Medium 4.3Preferred score · NVD (NIST)
AV:N/AC:M/Au:N/C:P/I:N/A:NSourcesSingle source
EPSS trend
Probability
5.84%
Chance of exploitation in the next 30 days
Percentile
93%
Versus all other CVEs
30-day change
0.00 pp
From 5.84% on 18-09-2026
18-09-202618-10-2026
EPSS score5.84%
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
Chainguard6 products
- libreoffice-24.2All versions (No fix recorded)
- libreoffice-24.8All versions (No fix recorded)
- libreoffice-25.2All versions (No fix recorded)
- libreoffice-25.8All versions (No fix recorded)
- libreoffice-26.2All versions (No fix recorded)
Wolfi6 products
- libreoffice-24.2All versions (No fix recorded)
- libreoffice-24.8All versions (No fix recorded)
- libreoffice-25.2All versions (No fix recorded)
- libreoffice-25.8All versions (No fix recorded)
- libreoffice-26.2All versions (No fix recorded)
Debian2 products
- libreofficeAll versions (No fix recorded)
- debian_linuxEOL8.0 | 9.0 | 10.0
Apache1 product
Libreoffice1 product
Libreoffice; openoffice1 product
- libreoffice, openoffice≤ at least 2012-12-15
Ubuntu1 product
- libreoffice< 1:4.2.6.3-0ubuntu1
7 vendors · 18 products
References
12 links
- bugzilla.redhat.com/show_bug.cgi?id=CVE-2012-5639X Refsource MISCIssue TrackingThird Party AdvisoryAdvisoryREPORT
- www.openwall.com/lists/oss-security/2012/12/14/1X Refsource MISCMailing ListThird Party AdvisoryAdvisoryARTICLE
- access.redhat.com/security/cve/cve-2012-5639Vendor AdvisoryX Refsource REDHATThird Party AdvisoryAdvisory