Medium WID-SEC-2023-3226 3 CVEs

Apache OpenOffice: Mehrere Schwachstellen

Published Dec 28, 2023 · Updated Dec 28, 2023 · de-DE

Vendor: Apache Product: OpenOffice < 4.1.15 Platform: Linux Platform: macOS Platform: Windows

Summary

Ein Angreifer kann mehrere Schwachstellen in Apache OpenOffice ausnutzen, um beliebigen Code auszuführen, vertrauliche Informationen offenzulegen, Sicherheitsmaßnahmen zu umgehen oder einen Denial-of-Service-Zustand zu verursachen.

Product

OpenOffice ist ein OpenSource Programmpaket von Apache mit zahlreichen Office-Anwendugen. Es enthält Programme zur Textverarbeitung, Tabellenkalkulation, Präsentation, Zeichnungen sowie eine Datenbank.

Vulnerabilities 3

High 7.5

CVE-2022-43680 Public exploit

In libexpat through 2.4.9, there is a use-after free caused by overeager destruction of a shared DTD in XML_ExternalEnt…

thunderbird insighttoolkit4 expat swish-e Debian Ubuntu Azure Linux Alpine

Oct 24, 2022
Unscored —

CVE-2012-5639

LibreOffice and OpenOffice automatically open embedded content

LibreOffice; OpenOffice LibreOffice, OpenOffice libreoffice libreoffice-25.2 Debian Wolfi

Dec 20, 2019
Unscored —

CVE-2023-47804

Apache OpenOffice: Macro URL arbitrary script execution

Apache OpenOffice documents can contain links that call internal macros with arbitrary arguments. Several URI Schemes are defined for this purpose. Links can be activated by clicks, or by automatic document events. The execution of such links must be subject …

Apache Software Foundation Apache OpenOffice

Dec 29, 2023

Revision history

2023-12-28 #1
Initiale Fassung

References

Apache OpenOffice Security Advisory vom 2023-12-28
https://seclists.org/oss-sec/2023/q4/343
Apache OpenOffice Security Advisory vom 2023-12-28
https://cwiki.apache.org/confluence/display/OOOUSERS/AOO+4.1.15+Release+Notes#AOO4.1.15ReleaseNotes-Security