1.9Baja
CVE-2026-59263Apache OpenOffice: Carefully crafted documents could display different data when opened with different programs, instead of being reported as corrupt.
Descripción
A manipulated document opened in Apache OpenOffice 4.1.16 or earlier may allow substituted content to be displayed manipulating the user. Such documents are corrupt and should not be opened. Users are recommended to upgrade to version 4.1.17, which fixes this issue.
Debilidad (CWE):
CWE-349
Datos: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Se publican tal como los indican las fuentes, en inglés.
Productos y versiones afectados
| Fabricante | Producto | Versiones | |
|---|---|---|---|
| Apache Software Foundation | Apache OpenOffice | ≤ 4.1.16 | |
| apache | openoffice | < 4.1.17 |
Referencias y parches
- https://lists.apache.org/thread.html/drr0ss9wrkq0omlrwjhcm8738pjx3xgd vendor-advisoryMailing ListVendor Advisory
- http://www.openwall.com/lists/oss-security/2026/11/03/21 Mailing ListThird Party Advisory
Coincidencias CPE (NVD) (1)
cpe:2.3:a:apache:openoffice:*:*:*:*:*:*:*:*< 4.1.17