As cited
Copy frozen at (site build).
vulnerabilities
LibreOffice and OpenOffice Flaws Let Malicious Spreadsheets Run Code Without Macro Warnings
Security researchers disclosed that malicious spreadsheets can execute arbitrary code in LibreOffice and Apache OpenOffice when Java support is enabled, bypassing the macro warning dialogs users typically receive. The vulnerability requires the program to have Java enabled and has been demonstrated as a proof of concept with no active exploitation reported.
Why it matters: Organizations and users relying on LibreOffice or OpenOffice with Java support are at risk of code execution through untrusted spreadsheet files; patch availability and the scope of affected versions should be verified immediately.
- Source published
- First seen by Cybersecurity Tracker