Arbitrary Code Injection

2023-04-2004:04:11

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

apache openoffice

vulnerability

arbitrary code injection

java class path

attacker

execute

0.001 Low

EPSS

Percentile

29.8%

JSON

Apache OpenOffice is vulnerable to Arbitrary Code Injection. The vulnerability exists because the Java class path is not properly configured which allows an attacker to inject and execute arbitrary codes.

CPENameOperatorVersion
libreoffice:bioniceq1:6.0.3-0ubuntu1
libreoffice:bioniceq1:6.0.7-0ubuntu0.18.04.10
libreoffice:focaleq1:6.4.6-0ubuntu0.20.04.1
libreoffice:focaleq1:6.4.2-0ubuntu3
libreoffice:focaleq1:6.4.5-0ubuntu0.20.04.1
libreoffice:bullseyeeq1:7.0.3-4
libreoffice:sideq1:7.0.4-3
libreoffice:sideq1:7.0.3-4+b1
libreoffice:bustereq1:6.1.5-3+deb10u7
libreoffice:bustereq1:6.1.5-3+deb10u6

Name	Operator	Version
libreoffice:bionic	eq	1:6.0.3-0ubuntu1
libreoffice:bionic	eq	1:6.0.7-0ubuntu0.18.04.10
libreoffice:focal	eq	1:6.4.6-0ubuntu0.20.04.1
libreoffice:focal	eq	1:6.4.2-0ubuntu3
libreoffice:focal	eq	1:6.4.5-0ubuntu0.20.04.1
libreoffice:bullseye	eq	1:7.0.3-4
libreoffice:sid	eq	1:7.0.4-3
libreoffice:sid	eq	1:7.0.3-4+b1
libreoffice:buster	eq	1:6.1.5-3+deb10u7
libreoffice:buster	eq	1:6.1.5-3+deb10u6