The vulnerability of the OpenOffice office suite relates to the issue of operations occurring outside the buffer boundaries in memory. This allows attackers to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the OpenOffice office suite is related to the issue of operations occurring outside the buffer boundaries in memory. Exploiting this vulnerability can allow a malicious actor to gain access to confidential data, compromise its integrity, and even cause service failures...

The vulnerability of the OpenOffice office suite arises from integer overflows that occur during the creation of records in the document table. This allows attackers to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the OpenOffice office suite is related to a potential overflow condition. Exploiting this vulnerability could allow an attacker to gain access to confidential data, compromise its integrity, and even cause service failures due to the records created by the attack...

The vulnerability of the OpenOffice office suite, related to integer overflow, allows attackers to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the OpenOffice office suite is related to a numerical overflow vulnerability. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause service interruptions...

The vulnerability of the QPRO file in the OpenOffice office suite allows a perpetrator to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the OpenOffice office suite is related to the execution of operations beyond buffer boundaries. Exploiting this vulnerability can allow a malicious actor to gain access to confidential data, compromise its integrity, and even cause service interruptions...

Open-Xchange: XSS on opening a malicious OpenOffice text document

Title Opening a malicious OpenOffice text document may lead to cross site scripting XSS attacks Description When generating HTML content for a comment present in text file, a placeholder div is generated by CommentPlaceHolder.java. The attribute data-container-id of this div is directly construct...

Apache OpenOffice -- Unrestricted actions leads to arbitrary code execution in crafted documents

The Apache Openofffice project reports: CVE-2020-13958 Unrestricted actions leads to arbitrary code execution in crafted documents Description A vulnerability in Apache OpenOffice scripting events allows an attacker to construct documents containing hyperlinks pointing to an executable on the...

XML External Entity Expansion

openoffice.org is vulnerable to XML External Entity expansion. If OpenOffice.org were to open a specially-crafted file such as an OpenDocument Format or OpenDocument Presentation file, it could possibly allow a remote attacker to obtain a copy of an arbitrary local file that the user running...

Arbitrary Code Execution

openoffice.org is vulnerable to arbitrary code execution. The vulnerability exist as a heap-based buffer overflow flaw was found in the way OpenOffice.org parsed certain Microsoft Office PowerPoint files. An attacker could use this flaw to create a specially-crafted Microsoft Office PowerPoint fi...

Arbitrary Code Execution

openoffice.org is vulnerable to arbitrary code execution. The vulnerability exists as a flaw was found in the script that launches OpenOffice.org. In some situations, a "." character could be included in the LDLIBRARYPATH variable, allowing a local attacker to execute arbitrary code with the...

Fedora: Security Advisory for ckeditor (FEDORA-2020-8d5de93970)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

RCE in LibreOffice and OpenOffice via the Apache UNO API

LibreOffice and OpenOffice are vulnerable to RCE via the Apache UNO API if either program is running as a listener on the host machine. Recent assessments: space-r7 at September 12, 2019 6:07pm UTC reported: Details The soffice binary allows passing arguments in order to listen on a host ip and...

The vulnerability of LibreOffice and Apache OpenOffice office programs lies in their automatic opening of embedded content, which allows attackers to compromise the integrity, confidentiality, and accessibility of protected information.

The vulnerability of LibreOffice and Apache OpenOffice desktop software relates to the automatic opening of embedded content. Exploiting this vulnerability can allow a malicious actor to compromise the integrity, confidentiality, and accessibility of protected information...

CVE-2012-5639

LibreOffice and OpenOffice automatically open embedded content...

CVE-2012-5639

LibreOffice and OpenOffice automatically open embedded content...

DEBIAN-CVE-2012-5639

LibreOffice and OpenOffice automatically open embedded content...

CVE-2012-5639

LibreOffice and OpenOffice automatically open embedded content...

Code injection

LibreOffice and OpenOffice automatically open embedded content...

UBUNTU-CVE-2012-5639

LibreOffice and OpenOffice automatically open embedded content...

CVE-2012-5639

LibreOffice and OpenOffice automatically open embedded content...

CVE-2012-5639

CVE-2012-5639 affects OpenOffice/LibreOffice where embedded content is opened automatically without a warning. Public references in Nessus/NCSC suggest OpenOffice has received fixes in OpenOffice 4.1.15, addressing this and related CVEs (e.g., CVE-2023-47804, CVE-2023-1183, CVE-2022-43680). The p...