Vulnerabilidades de Apache Software Foundation Apache OpenOffice (CVE)

Registros CVE publicados para Apache Software Foundation Apache OpenOffice, los más recientes primero. Siga el producto para recibir un correo con cada nueva.

20 resultados
5.5Media
CVE-2026-90632

Apache OpenOffice: Local file inclusion via GStreamer plugin

Apache Software Foundation Apache OpenOffice

Apache OpenOffice documents can include multimedia content (audio, video, etc.) A crafted document could exploit the GStreamer multimedia component of Apache OpenOffice version through 4.1.16 to load the contents of any local file, and include them when the …

7.3Alta
CVE-2026-90629

Apache OpenOffice: Out of bounds memory access during WMF import

Apache Software Foundation Apache OpenOffice

An uncontrolled memory access in the WMF import code of Apache OpenOffice versions through 4.1.16 allows a crafted WMF file to cause an invalid memory access, causing program crash or memory corruption. Users are recommended to upgrade to version 4.1.17, whic…

7.3Alta
CVE-2026-90628

Apache OpenOffice: Stack overflow in CFF hint handling

Apache Software Foundation Apache OpenOffice

An uncontrolled memory access in the PDF export code of Apache OpenOffice versions through 4.1.16 allows a crafted CFF font to cause a stack overflow problem, causing program crash or memory corruption, or even running other code. Users are recommended to up…

7.3Alta
CVE-2026-59268

Apache OpenOffice: Heap out-of-bounds write in WW8 PLCF reader

Apache Software Foundation Apache OpenOffice

An out-of-bounds Write vulnerability in Apache OpenOffice versions through 4.1.16 could allow an attacker to craft a Microsoft Word document that would crash the program, or otherwise corrupt other memory areas. Users are recommended to upgrade to version 4.…

4.3Media
CVE-2025-64406

Apache OpenOffice: Possible memory corruption during CSV import

Apache Software Foundation Apache OpenOffice

An out-of-bounds Write vulnerability in Apache OpenOffice could allow an attacker to craft a document that would crash the program, or otherwise corrupt other memory areas. This issue affects Apache OpenOffice: through 4.1.15. Users are recommended to upgra…

7.5Alta
CVE-2025-64401

Apache OpenOffice: Remote documents loaded without prompt via IFrame

Apache Software Foundation Apache OpenOffice

Apache OpenOffice documents can contain links. A missing Authorization vulnerability in Apache OpenOffice allowed an attacker to craft a document that would cause external links to be loaded without prompt. In the affected versions of Apache OpenOffice, docu…