CVE-2020-12801

Source
https://nvd.nist.gov/vuln/detail/CVE-2020-12801
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2020-12801.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2020-12801
Downstream
Related
Published
2020-05-18T15:15:11Z
Modified
2025-10-14T14:33:46Z
Severity
  • 5.3 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N CVSS Calculator
Summary
[none]
Details

If LibreOffice has an encrypted document open and crashes, that document is auto-saved encrypted. On restart, LibreOffice offers to restore the document and prompts for the password to decrypt it. If the recovery is successful, and if the file format of the recovered document was not LibreOffice's default ODF file format, then affected versions of LibreOffice default that subsequent saves of the document are unencrypted. This may lead to a user accidentally saving a MSOffice file format document unencrypted while believing it to be encrypted. This issue affects: LibreOffice 6-3 series versions prior to 6.3.6; 6-4 series versions prior to 6.4.3.

References

Affected packages

Git / github.com/libreoffice/core

Affected ranges

Type
GIT
Repo
https://github.com/libreoffice/core
Events

Database specific

{
    "vanir_signatures": [
        {
            "signature_version": "v1",
            "target": {
                "function": "Chart2ExportTest::testCrossBetweenODS",
                "file": "chart2/qa/extras/chart2export.cxx"
            },
            "signature_type": "Function",
            "source": "https://github.com/libreoffice/core/commit/129a60db424e2599f22e8d4ecddb07f8a1624d46",
            "deprecated": false,
            "digest": {
                "length": 312.0,
                "function_hash": "112346488749896510946958429826578704499"
            },
            "id": "CVE-2020-12801-42d0386b"
        },
        {
            "signature_version": "v1",
            "target": {
                "file": "chart2/qa/extras/chart2export.cxx"
            },
            "signature_type": "Line",
            "source": "https://github.com/libreoffice/core/commit/129a60db424e2599f22e8d4ecddb07f8a1624d46",
            "deprecated": false,
            "digest": {
                "line_hashes": [
                    "269229940422985949334327393235723096875",
                    "150178393803842199385879500729143774766",
                    "119724721202715139252776025501158600571",
                    "289868342165289478876981246002887798708",
                    "220856527954418128600113756508233179250",
                    "111662027942689248806648949361408038341",
                    "92975977315345249425439251203836172197",
                    "66148255043936545412486114566334047707",
                    "63886810412750009820549315939047486378",
                    "270549844970812713953388948500478548690",
                    "217951086691460144290419355966300019793",
                    "225531158194947820010227931109766951222",
                    "184329777066494342599088020785760295323",
                    "296994520143989077158133862755430231422",
                    "283103373786130313939916805040548163780",
                    "337658136245394764426712579747439658759",
                    "266978585474683219514938832116551598308",
                    "313577411692534617885369092791168909364"
                ],
                "threshold": 0.9
            },
            "id": "CVE-2020-12801-66caf4b1"
        },
        {
            "signature_version": "v1",
            "target": {
                "function": "SeriesPlotterContainer::isCategoryPositionShifted",
                "file": "chart2/source/view/main/ChartView.cxx"
            },
            "signature_type": "Function",
            "source": "https://github.com/libreoffice/core/commit/129a60db424e2599f22e8d4ecddb07f8a1624d46",
            "deprecated": false,
            "digest": {
                "length": 400.0,
                "function_hash": "78606951956688918472172577471178944215"
            },
            "id": "CVE-2020-12801-8a799d31"
        },
        {
            "signature_version": "v1",
            "target": {
                "function": "AxisConverter::convertFromModel",
                "file": "oox/source/drawingml/chart/axisconverter.cxx"
            },
            "signature_type": "Function",
            "source": "https://github.com/libreoffice/core/commit/129a60db424e2599f22e8d4ecddb07f8a1624d46",
            "deprecated": false,
            "digest": {
                "length": 8210.0,
                "function_hash": "56315025900708865496357424182474001309"
            },
            "id": "CVE-2020-12801-9b579d4c"
        },
        {
            "signature_version": "v1",
            "target": {
                "file": "chart2/source/view/main/ChartView.cxx"
            },
            "signature_type": "Line",
            "source": "https://github.com/libreoffice/core/commit/129a60db424e2599f22e8d4ecddb07f8a1624d46",
            "deprecated": false,
            "digest": {
                "line_hashes": [
                    "107712184816061146995281488578626709306",
                    "300085373828234112268960959774862249543",
                    "275769828836013074820494002251524427999",
                    "29691256563866827949895442116300830661",
                    "176131858604223623443739141691829308277",
                    "104415623021870926443982827232703796802",
                    "204727147462927567620130679107924428354",
                    "295683400320346099021979282873145255160",
                    "226623992261199791208710077039695408941",
                    "95879012327435347233594685193580217203",
                    "102750351596961108763456045980927279452",
                    "25401837840837036850721179163470685286",
                    "68282176249778915149513807632432678312",
                    "227649965704388901435127454348993328077",
                    "137640157980885055957626893240280231122",
                    "11278048887455546216601223346158368790",
                    "298407814393668356057021985693738913524",
                    "17138743953480212239855793660893472645",
                    "4501029468648612735349462957632252995",
                    "120178696520520641959338769722589812558",
                    "249172730350293605514784414144614307885",
                    "162794486326949075818693037191190072535",
                    "316665533622909541898950098330116844645",
                    "121910706034377722627924183411633501485",
                    "111800338372243900768767722799594961064",
                    "106828439145796009007233241768942975001"
                ],
                "threshold": 0.9
            },
            "id": "CVE-2020-12801-a3c0d578"
        },
        {
            "signature_version": "v1",
            "target": {
                "function": "SeriesPlotterContainer::initializeCooSysAndSeriesPlotter",
                "file": "chart2/source/view/main/ChartView.cxx"
            },
            "signature_type": "Function",
            "source": "https://github.com/libreoffice/core/commit/129a60db424e2599f22e8d4ecddb07f8a1624d46",
            "deprecated": false,
            "digest": {
                "length": 5080.0,
                "function_hash": "167421413808275017026320070125743934838"
            },
            "id": "CVE-2020-12801-cd822a2d"
        },
        {
            "signature_version": "v1",
            "target": {
                "file": "oox/source/drawingml/chart/axisconverter.cxx"
            },
            "signature_type": "Line",
            "source": "https://github.com/libreoffice/core/commit/129a60db424e2599f22e8d4ecddb07f8a1624d46",
            "deprecated": false,
            "digest": {
                "line_hashes": [
                    "318425588666055456614460421201245391284",
                    "233001150357346037746518615718389141087",
                    "128449176116844681046026879812826024788",
                    "64985800834495018939287347706116470052"
                ],
                "threshold": 0.9
            },
            "id": "CVE-2020-12801-dfec689d"
        },
        {
            "signature_version": "v1",
            "target": {
                "file": "chart2/source/model/template/ChartTypeTemplate.cxx"
            },
            "signature_type": "Line",
            "source": "https://github.com/libreoffice/core/commit/129a60db424e2599f22e8d4ecddb07f8a1624d46",
            "deprecated": false,
            "digest": {
                "line_hashes": [
                    "259776796991168961270851703690618836005",
                    "136822413143814997243800081472645395372",
                    "243437766430776349799582692279061397763",
                    "202021085017887605093726223961524938813",
                    "100182050497959342530132089662381788436",
                    "231736766697470133055164172290158233476",
                    "293615077838626260238959545675491443415",
                    "150857528067181685523055140722085767206",
                    "290883502604213629397955637826567712585",
                    "291726262176469774656066635318758850668",
                    "179153992805376918691546755144745189368"
                ],
                "threshold": 0.9
            },
            "id": "CVE-2020-12801-eea16a7b"
        },
        {
            "signature_version": "v1",
            "target": {
                "function": "SeriesPlotterContainer::initAxisUsageList",
                "file": "chart2/source/view/main/ChartView.cxx"
            },
            "signature_type": "Function",
            "source": "https://github.com/libreoffice/core/commit/129a60db424e2599f22e8d4ecddb07f8a1624d46",
            "deprecated": false,
            "digest": {
                "length": 1597.0,
                "function_hash": "142666520875385633595498569991673869532"
            },
            "id": "CVE-2020-12801-ef24f7d5"
        }
    ]
}