Apache OpenOffice Missing Authorization Vulnerability in DDE Link Handling
Vulnerability
A missing authorization vulnerability in Apache OpenOffice allows external links in documents to be loaded without user prompt. This issue affects versions through 4.1.15. In the vulnerable versions, Calc spreadsheets with DDE links to external files would automatically load the contents of those files without asking for permission.
Impact
Exploitation of this vulnerability could lead to unauthorized access to external files linked within an OpenOffice Calc spreadsheet, potentially allowing sensitive information to be accessed without user consent.
Remediation
Users are advised to upgrade to Apache OpenOffice version 4.1.16, which addresses this vulnerability. The latest version can be downloaded from the Apache OpenOffice download page.
Vulnerability Rating
Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.