CVE-2023-47804

CVE-2023-47804 affects Apache OpenOffice prior to 4.1.15. It stems from links in documents that call internal macros with arbitrary arguments; in affected versions, user approval for such links isn’t always requested, enabling arbitrary script execution when links are clicked or triggered by docu...

CVE-2021-28129

CVE-2021-28129 concerns the OpenOffice DEB package for version 4.1.8, where installation did not run as root but used UID/GID 500. This mispackaging could enable a crafted attack on files owned by that user/group if such files exist, potentially affecting desktop integration and local file owners...

CVE-2011-2177

Vulnerability summary (CVE-2011-2177): OpenOffice.org v3.3 is affected. The issue allows execution of arbitrary code with the privileges of the user running the OpenOffice.org suite tools. The connected documents do not provide concrete exploit steps, affected component details beyond the product...

CVE-2025-64406

Apache OpenOffice versions through 4.1.15 are susceptible to an out-of-bounds Write vulnerability (CWE-787). This flaw allows a remote attacker to craft a malicious document that can cause the program to crash or lead to the corruption of other memory areas. One report specifically identifies a p...

CVE-2025-64407

Technical details for CVE-2025-64407 are not publicly provided in the connected documents. Available sources discuss related vulnerabilities (CVE-2024-12425/12426) and Apache OpenOffice issues, but do not specify this CVE’s affected products, root cause, or fixes.

CVE-2025-64402

Apache OpenOffice versions through 4.1.15 are affected by a missing Authorization vulnerability. An attacker can craft a document that causes external links to be loaded without user prompts. Specifically, documents using "OLE objects" linked to external files will load those contents automatical...

CVE-2025-64405

CVE-2025-64405 affects Apache OpenOffice up to version 4.1.15. The issue is a missing authorization check when handling external links, specifically in Calc spreadsheets with DDE links to external files, which could cause the external contents to be loaded without user prompt. The combined set of...

CVE-2025-64401

A missing Authorization vulnerability in Apache OpenOffice (versions through 4.1.15) allows an attacker to craft a document that causes external links to load without user prompting. Specifically, documents utilizing "floating frames" linked to external files will load the contents of those frame...

CVE-2025-64404

CVE-2025-64404 affects Apache OpenOffice up to version 4.1.15. The issue is a missing Authorization vulnerability that allows an attacker to craft a document containing links (specifically background fill or bullet images) that would cause external files to be loaded without prompting the user. A...

CVE-2025-64403

Apache OpenOffice Calc is vulnerable to a missing Authorization flaw (CWE-862) that allows an attacker to craft a document causing external data sources to be loaded without a user prompt. This issue impacts versions of Apache OpenOffice through 4.1.15 . The vulnerability could allow a malicious ...