2 results · Clear filters · Feed
-
Low 3.3
Apache OpenOffice: Remote document loaded without prompt, possibiy leaking environment variables
Apache OpenOffice documents can contain links. A missing Authorization vulnerability in Apache OpenOffice allowed an attacker to craft a document that would cause external links to be loaded without prompt, possibly transferring the contents of environment va…
-
Low 1.9
Apache OpenOffice: Carefully crafted documents could display different data when opened with different programs, instead of being reported as corrupt.
A manipulated document opened in Apache OpenOffice 4.1.16 or earlier may allow substituted content to be displayed manipulating the user. Such documents are corrupt and should not be opened. Users are recommended to upgrade to version 4.1.17, which fixes this…