Aller au contenu
en Se connecter
Non notée

CVE-2025-64407 Apache OpenOffice documents can contain links

Description

Apache OpenOffice documents can contain links. A missing Authorization vulnerability in Apache OpenOffice allowed an attacker to craft a document that would cause external links to be loaded without prompt. Such links could also be used to transmit system information, such as environment variables or configuration settings. In the affected versions of Apache OpenOffice, documents that used a certain URI scheme linking to external files would load the contents of such files without prompting the user for permission to do so. Such URI scheme allows to include system configuration data, that is not supposed to be transmitted externally. This issue affects Apache OpenOffice: through 4.1.15. Users are recommended to upgrade to version 4.1.16, which fixes the issue. The LibreOffice suite reported this issue as CVE-2024-12426.

Produits et versions touchés

Produit Versions touchées Corrigé en
Apache OpenOffice 4.1 premières → 4.1.15 Pas de correctif indiqué

Références

Chronologie

  1. Publiée
  2. Dernière modification

Autres CVE de Apache OpenOffice

Les 39 CVE de Apache OpenOffice →
CVE-2026-59267 Apache OpenOffice: Heap Buffer Overflow in DXF LWPOLYLINE import could cause memory corruption 5.8 Moyenne CVE-2026-90632 Apache OpenOffice: Local file inclusion via GStreamer plugin Non notée CVE-2026-90634 Apache OpenOffice: Out-of-bounds write when importing encrypted PDF files Non notée CVE-2026-90631 Apache OpenOffice: Remote document loaded without prompt, possibiy leaking environment variables Non notée
Suivre cette CVE