Apache OpenOffice Missing Authorization Vulnerability Allows Unprompted Loading of External Links

A missing authorization vulnerability in Apache OpenOffice documents prior to version 4.1.16 allowed external links to be loaded without user permission. This issue affected documents using background fill images or bullet images linked to external files, which would automatically load the contents of those files without prompting the user. The vulnerability is present in Apache OpenOffice versions through 4.1.15.

Impact

Exploitation of this vulnerability could lead to unprompted loading of external files, potentially causing privacy concerns or other issues depending on the nature of the loaded content.

Remediation

Users are advised to upgrade to Apache OpenOffice version 4.1.16, which addresses this vulnerability. The latest version can be downloaded from the Apache OpenOffice download page.