CVE-2018-10583

CVE-2018-10583 is an information-disclosure vulnerability affecting LibreOffice 6.0.3 and Apache OpenOffice Writer 4.1.5 where processing a malicious ODT file can trigger an SMB connection (e.g., xlink:href=file://192.168.0.2/test.jpg) and disclose sensitive information. Public references and cha...

CVE-2010-4494

CVE-2010-4494 is a double-free vulnerability in libxml2 (notably 2.7.8 and related versions) used by Chrome and other products. The issue affects libxml2’s handling of XPath/XML entities and could allow a remote attacker to crash or potentially execute code via crafted XML input. Public advisorie...

CVE-2017-12607

CVE-2017-12607 affects OpenOffice/OpenOffice.org and specifically the PPT file parser’s PPTStyleSheet. A crafted PPT document can trigger memory corruption and an application crash, with potential for arbitrary code execution. Vulnerable: OpenOffice prior to 4.1.4. Mitigation: upgrade to a fixed ...

CVE-2022-38745

CVE-2022-38745 : The vulnerability described as “Empty entry in Java class path” is referenced across multiple advisories in connected documents, affectingLibreOffice packages (e.g., MiracleLinux, Red Hat, Oracle Linux, Alibaba Cloud Linux) and OpenOffice-related contexts. The common impact is po...

CVE-2012-2665

CVE-2012-2665 affects OpenOffice.org and LibreOffice prior to 3.5.5. The issue is a heap-based buffer overflow in the XML manifest encryption tag parsing when processing Open Document Text (.odt) files. An attacker could craft an ODT with (1) a child tag under an incorrect parent, (2) duplicate t...

CVE-2017-12608

CVE-2017-12608 affects the Apache OpenOffice/ OpenOffice Writer DOC file parser (before 4.1.4), specifically in ImportOldFormatStyles. A crafted DOC document can trigger memory corruption leading to denial of service and may potentially allow arbitrary code execution. Exploitation status and exac...

CVE-2018-11790

CVE-2018-11790 affects Apache OpenOffice 4.1.5 and earlier. The flaw is an arithmetic overflow in a string-length calculation when loading a document with an end-of-line termination smaller than the OS uses, triggered by handling virtual tables. Exploitation details are not explicitly provided in...

CVE-2017-9806

CVE-2017-9806 affects Apache OpenOffice Writer DOC parsing prior to 4.1.4, due to an issue in the WW8Fonts constructor that can be triggered by crafted DOC files. This memory-corruption/vector leads to denial of service and potentially arbitrary code execution. Affected product: OpenOffice/OpenOf...

CVE-2021-33035

CVE-2021-33035 describes a buffer overflow in Apache OpenOffice when reading DBF files: the size of certain DBF fields isn’t checked, causing overflow of allocated space and potential arbitrary code execution via stack manipulation. Affected products: Apache OpenOffice up to and including 4.1.10....

CVE-2021-41830

CVE-2021-41830 describes an imbalance in trust validation where an attacker can manipulate signed documents and macros to appear from a trusted source, affecting Apache OpenOffice up to 4.1.10. The initial advisory recommends updating to OpenOffice 4.1.11. Connected documents discuss related Libr...

CVE-2021-41832

CVE-2021-41832 concerns Apache OpenOffice data forgery via signature manipulation. The issue allows an attacker to cause a document to appear signed by a trusted source, affecting all OpenOffice versions up to 4.1.10. The advised remediation is to upgrade to OpenOffice 4.1.11. While several relat...

CVE-2022-47502

Apache OpenOffice

CVE-2016-1513

The CVE-2016-1513 issue affects Apache OpenOffice Impress (4.1.2 and earlier). It arises from improper handling of MetaActions in OpenDocument (.odp) and Presentation Template (.otp) files, causing an out-of-bounds read/write that can lead to denial of service or arbitrary code execution. The vul...

CVE-2021-28129

CVE-2021-28129 concerns the OpenOffice DEB package for version 4.1.8, where installation did not run as root but used UID/GID 500. This mispackaging could enable a crafted attack on files owned by that user/group if such files exist, potentially affecting desktop integration and local file owners...

CVE-2011-2177

Vulnerability summary (CVE-2011-2177): OpenOffice.org v3.3 is affected. The issue allows execution of arbitrary code with the privileges of the user running the OpenOffice.org suite tools. The connected documents do not provide concrete exploit steps, affected component details beyond the product...

CVE-2025-64404

CVE-2025-64404 affects Apache OpenOffice up to version 4.1.15. The issue is a missing Authorization vulnerability that allows an attacker to craft a document containing links (specifically background fill or bullet images) that would cause external files to be loaded without prompting the user. A...

CVE-2025-64401

Apache OpenOffice is affected by a vulnerability where documents with floating frames linked to external files can load external content without user permission. Root cause: missing Authorization to load external links. Affected versions: Apache OpenOffice up to 4.1.15. Impact: loading external f...

CVE-2025-64405

CVE-2025-64405 affects Apache OpenOffice up to version 4.1.15. The issue is a missing authorization check when handling external links, specifically in Calc spreadsheets with DDE links to external files, which could cause the external contents to be loaded without user prompt. The combined set of...