Redland Raptor (aka libraptor) before 2.0.7, as used by OpenOffice 3.3 and 3.4 Beta, LibreOffice before 3.4.6 and 3.5.x before 3.5.1, and other products, allows user-assisted remote attackers to read arbitrary files via a crafted XML external entity (XXE) declaration and reference in an RDF document.
CVSS Details
- CVSS 3.1 Base Score: 6.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Apache Openoffice | — | Upgrade Apache OpenOffice to the latest version | Sep 12, 2025 | Jun 17, 2012 |
| Centos_linux | — | Upgrade openoffice.org-pyunoUpgrade openoffice.org-langpack-xh_ZAUpgrade openoffice.org-langpack-nb_NOUpgrade openoffice.org-langpack-gl_ESUpgrade openoffice.org-emailmergeUpgrade openoffice.org-langpack-ruUpgrade openoffice.org-langpack-ga_IEUpgrade openoffice.org-langpack-th_THUpgrade openoffice.org-langpack-lt_LTUpgrade openoffice.org-langpack-frUpgrade openoffice.org-langpack-ve_ZAUpgrade openoffice.org-langpack-pa_INUpgrade openoffice.org-calcUpgrade openoffice.org-langpack-af_ZAUpgrade openoffice.org-langpack-pt_PTUpgrade openoffice.org-baseUpgrade openoffice.org-langpack-sk_SKUpgrade openoffice.org-langpack-svUpgrade openoffice.org-coreUpgrade openoffice.org-langpack-el_GRUpgrade openoffice.org-writerUpgrade openoffice.org-langpack-bnUpgrade openoffice.org-langpack-ts_ZAUpgrade openoffice.org-langpack-kn_INUpgrade openoffice.org-langpack-ms_MYUpgrade openoffice.org-sdk-docUpgrade openoffice.org-langpack-zh_CNUpgrade openoffice.org-langpack-he_ILUpgrade openoffice.org-langpack-esUpgrade openoffice.org-xsltfilterUpgrade openoffice.org-javafilterUpgrade openoffice.org-graphicfilterUpgrade openoffice.org-langpack-te_INUpgrade openoffice.org-langpack-nn_NOUpgrade openoffice.org-langpack-ta_INUpgrade openoffice.org-langpack-eu_ESUpgrade openoffice.org-mathUpgrade openoffice.org-drawUpgrade openoffice.org-langpack-hi_INUpgrade openoffice.org-langpack-sl_SIUpgrade openoffice.org-langpack-cy_GBUpgrade openoffice.org-langpack-zu_ZAUpgrade openoffice.org-langpack-sr_CSUpgrade openoffice.org-langpack-nso_ZAUpgrade openoffice.org-langpack-zh_TWUpgrade openoffice.org-langpack-tr_TRUpgrade openoffice.org-impressUpgrade openoffice.org-langpack-et_EEUpgrade openoffice.org-langpack-ja_JPUpgrade openoffice.org-langpack-tn_ZAUpgrade openoffice.org-langpack-bg_BGUpgrade openoffice.org-langpack-ss_ZAUpgrade openoffice.org-langpack-pt_BRUpgrade openoffice.org-sdkUpgrade openoffice.org-langpack-or_INUpgrade openoffice.org-langpack-da_DKUpgrade openoffice.org-langpack-mr_INUpgrade openoffice.org-headlessUpgrade openoffice.org-langpack-cs_CZUpgrade openoffice.org-langpack-deUpgrade openoffice.org-langpack-as_INUpgrade openoffice.org-langpack-st_ZAUpgrade openoffice.org-langpack-hu_HUUpgrade openoffice.org-langpack-arUpgrade openoffice.org-langpack-ko_KRUpgrade raptorUpgrade openoffice.org-langpack-hr_HRUpgrade raptor-develUpgrade openoffice.org-langpack-itUpgrade openoffice.org-ureUpgrade openoffice.org-langpack-fi_FIUpgrade openoffice.org-testtoolsUpgrade openoffice.org-langpack-gu_INUpgrade openoffice.org-langpack-ml_INUpgrade openoffice.org-langpack-nlUpgrade openoffice.org-langpack-pl_PLUpgrade openoffice.org-langpack-nr_ZAUpgrade openoffice.org-langpack-ca_ESUpgrade openoffice.org-langpack-ur | Dec 1, 2016 | Jun 16, 2012 |
| Freebsd | — | Upgrade raptor2Upgrade raptor | Dec 10, 2025 | Mar 25, 2012 |
| Gentoo Linux | — | Upgrade app-office/openoffice-bin.Upgrade app-office/openoffice.Upgrade app-office/libreoffice-bin.Upgrade app-office/libreoffice. | Oct 30, 2017 | Jun 16, 2012 |
| Oracle_linux | — | Upgrade raptor-develUpgrade raptor | Oct 16, 2024 | Jun 17, 2012 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Mar 22, 2012 |
| Suse | — | Upgrade raptorUpgrade libraptor-develUpgrade libraptor2-0 | Dec 12, 2013 | Jun 28, 2013 |
| Ubuntu | — | Upgrade libraptor1Upgrade libraptor2-0 | Nov 8, 2024 | Jun 17, 2012 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub