Non notée
CVE-2021-40439 Apache OpenOffice has a dependency on expat software
Description
Apache OpenOffice has a dependency on expat software. Versions prior to 2.1.0 were subject to CVE-2013-0340 a "Billion Laughs" entity expansion denial of service attack and exploit via crafted XML files. ODF files consist of a set of XML files. All versions of Apache OpenOffice up to 4.1.10 are subject to this issue. expat in version 4.1.11 is patched.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Apache OpenOffice 4.1 | premières → 4.1.10 | Pas de correctif indiqué |
| Apache OpenOffice 3.4 | premières → 3.4 | Pas de correctif indiqué |
Références
- lists.apache.org lists.apache.org
- [announce] 20211007 CVE-2021-40439: Apache OpenOffice: Billion Laughs lists.apache.org
- [oss-security] 20211007 CVE-2021-40439: Apache OpenOffice: Billion Laughs www.openwall.com
Chronologie
- Publiée
- Dernière modification
Autres CVE de Apache OpenOffice
Les 39 CVE de Apache OpenOffice →
CVE-2026-59267
Apache OpenOffice: Heap Buffer Overflow in DXF LWPOLYLINE import could cause memory corruption
5.8
Moyenne
CVE-2026-90632
Apache OpenOffice: Local file inclusion via GStreamer plugin
Non notée
CVE-2026-90634
Apache OpenOffice: Out-of-bounds write when importing encrypted PDF files
Non notée
CVE-2026-90631
Apache OpenOffice: Remote document loaded without prompt, possibiy leaking environment variables
Non notée