CVE-2021-30245 Code execution in Apache OpenOffice via non-http(s) schemes in Hyperlinks

🗓️ 15 Apr 2021 19:30:14Reported by apacheType

CVE-2021-30245 Code execution in Apache OpenOffice via non-http(s) schemes in Hyperlink

Reporter	Title	Published	Views	Family All 14
BDU FSTEC	The vulnerability of the Apache OpenOffice office software, related to errors in processing hypertext links, allows a hacker to execute arbitrary code.	18 Jun 202100:00	–	bdu_fstec
CNNVD	Apache OpenOffice 安全漏洞	15 Apr 202100:00	–	cnnvd
CNVD	Apache OpenOffice Code Execution Vulnerability (CNVD-2021-29854)	19 Apr 202100:00	–	cnvd
CVE	CVE-2021-30245	15 Apr 202119:30	–	cve
FreeBSD	All versions of Apache OpenOffice through 4.1.9 can open non-http(s) hyperlinks. If the link is specifically crafted this could lead to untrusted code execution.	25 Jan 202100:00	–	freebsd
EUVD	EUVD-2021-17177	7 Oct 202500:30	–	euvd
Tenable Nessus	FreeBSD : All versions of Apache OpenOffice through 4.1.9 can open non-http(s) hyperlinks. If the link is specifically crafted this could lead to untrusted code execution. (e87c2647-a188-11eb-8806-1c1b0d9ea7e6)	20 Apr 202100:00	–	nessus
Tenable Nessus	Apache OpenOffice < 4.1.10 Arbitrary Code Execution	15 Oct 202100:00	–	nessus
Kaspersky	KLA12405 ACE vulnerability in OpenOffice	4 May 202100:00	–	kaspersky
NVD	CVE-2021-30245	15 Apr 202120:15	–	nvd

[
  {
    "product": "Apache OpenOffice",
    "vendor": "Apache Software Foundation",
    "versions": [
      {
        "lessThanOrEqual": "4.1.9",
        "status": "affected",
        "version": "Apache OpenOffice",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
lists	www.lists.apache.org/thread.html/ra2cabdc083d5160a84de9a6436296ee5030fb3a16dc490dee4f983d5%40%3Cdev.openoffice.apache.org%3E
lists	www.lists.apache.org/thread.html/r87ff11512e4883052991e6b725e20294224034ea8453b811fb3ee735%40%3Cusers.openoffice.apache.org%3E
lists	www.lists.apache.org/thread.html/ra2cabdc083d5160a84de9a6436296ee5030fb3a16dc490dee4f983d5%40%3Cusers.openoffice.apache.org%3E
lists	www.lists.apache.org/thread.html/r87ff11512e4883052991e6b725e20294224034ea8453b811fb3ee735%40%3Cdev.openoffice.apache.org%3E
lists	www.lists.apache.org/thread.html/r7c01173f763b0c4212ada0e6ab283984d6e058d72258efce85c006ab%40%3Cannounce.apache.org%3E

16 Apr 2021 01:06Current

8.8High risk

Vulners AI Score8.8

EPSS0.04942