Apache OpenOffice Missing Authorization Vulnerability Allows Unprompted Loading of External Links via OLE Objects
Vulnerability
A missing authorization vulnerability in Apache OpenOffice documents through version 4.1.15 allows external links to be loaded without user permission. This issue arises when documents contain OLE objects linked to external files, which are accessed automatically without prompting the user. Users are advised to upgrade to Apache OpenOffice 4.1.16, which addresses this vulnerability.
Impact
Exploitation of this vulnerability leads to external files being loaded into the OpenOffice document without user consent, potentially allowing for unauthorized access to sensitive information or files.
Remediation
Users should upgrade to Apache OpenOffice version 4.1.16, available on the Apache OpenOffice download page.
Vulnerability Rating
Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.