CVE-2023-47804

CVE-2023-47804 affects Apache OpenOffice prior to 4.1.15. It stems from links in documents that call internal macros with arbitrary arguments; in affected versions, user approval for such links isn’t always requested, enabling arbitrary script execution when links are clicked or triggered by docu...

CVE-2021-28129

CVE-2021-28129 concerns the OpenOffice DEB package for version 4.1.8, where installation did not run as root but used UID/GID 500. This mispackaging could enable a crafted attack on files owned by that user/group if such files exist, potentially affecting desktop integration and local file owners...

CVE-2011-2177

Vulnerability summary (CVE-2011-2177): OpenOffice.org v3.3 is affected. The issue allows execution of arbitrary code with the privileges of the user running the OpenOffice.org suite tools. The connected documents do not provide concrete exploit steps, affected component details beyond the product...

CVE-2025-64406

Apache OpenOffice versions through 4.1.15 are vulnerable to an out-of-bounds Write vulnerability. The root cause stems from out-of-bounds writes to memory buffers, which can be triggered by a remote attacker through a specially crafted document. This flaw can lead to a program crash (Denial of Se...

CVE-2025-64407

Technical details for CVE-2025-64407 are not publicly provided in the connected documents. Available sources discuss related vulnerabilities (CVE-2024-12425/12426) and Apache OpenOffice issues, but do not specify this CVE’s affected products, root cause, or fixes.

CVE-2025-64402

Apache OpenOffice versions through 4.1.15 are vulnerable to a missing Authorization vulnerability that allows an attacker to craft a document containing OLE objects . These objects can cause the application to load content from external files without prompting the user for permission. Exploitatio...

CVE-2025-64404

CVE-2025-64404 affects Apache OpenOffice up to version 4.1.15. The issue is a missing Authorization vulnerability that allows an attacker to craft a document containing links (specifically background fill or bullet images) that would cause external files to be loaded without prompting the user. A...

CVE-2025-64405

CVE-2025-64405 affects Apache OpenOffice up to version 4.1.15. The issue is a missing authorization check when handling external links, specifically in Calc spreadsheets with DDE links to external files, which could cause the external contents to be loaded without user prompt. The combined set of...

CVE-2025-64401

A missing Authorization vulnerability in Apache OpenOffice (versions through 4.1.15) allows an attacker to craft a document that automatically loads external links without prompting the user for permission. Specifically, documents using "floating frames" linked to external files would load their ...

CVE-2025-64403

Apache OpenOffice versions through 4.1.15 are vulnerable to a missing Authorization flaw in the Calc spreadsheet component. An attacker can craft a document that causes links to external data sources to be loaded automatically without prompting the user for permission. This vulnerability could le...