Kaspersky LabKLA12404KLA12404 Multiple vulnerabilities in OpenOffice
7.8 High
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
7.7 High
AI Score
Confidence
High
6.8 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
0.007 Low
EPSS
Percentile
80.6%
Detect date:
10/06/2021
Severity:
High
Description:
Multiple vulnerabilities were found in OpenOffice. Malicious users can exploit these vulnerabilities to execute arbitrary code, gain privileges, bypass security restrictions, cause denial of service.
Affected products:
OpenOffice earlier than 4.1.11
Solution:
Update to the latest version
Download OpenOffice
Original advisories:
CVE-2021-28129
CVE-2021-40439
CVE-2021-33035
CVE-2021-41830
CVE-2021-41831
CVE-2021-41832
Impacts:
ACE
Related products:
CVE-IDS:
CVE-2021-330357.8Critical
CVE-2021-418327.5Critical
CVE-2021-281297.8Critical
CVE-2021-418315.3High
CVE-2021-404396.5High
CVE-2021-418307.5Critical
References
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-28129
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-33035
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-40439
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-41830
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-41831
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-41832
statistics.securelist.com/vulnerability-scan/month
threats.kaspersky.com/en/product/OpenOffice.org/
www.openoffice.org/download/index.html
www.openoffice.org/security/cves/CVE-2021-28129.html
www.openoffice.org/security/cves/CVE-2021-33035.html
www.openoffice.org/security/cves/CVE-2021-40439.html
www.openoffice.org/security/cves/CVE-2021-41830.html
www.openoffice.org/security/cves/CVE-2021-41831.html
www.openoffice.org/security/cves/CVE-2021-41832.html
Related
7.8 High
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
7.7 High
AI Score
Confidence
High
6.8 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
0.007 Low
EPSS
Percentile
80.6%