CYBERSECURITYTRACKER
Permanent story citation

LibreOffice and OpenOffice Flaws Let Malicious Spreadsheets Run Code Without Macro Warnings

This page keeps the story as Cybersecurity Tracker first published it. If the tracker later corrects it, the correction appears below the original and never replaces it.

Back to newsStory 9475

As cited

Copy frozen at (site build).

vulnerabilities

LibreOffice and OpenOffice Flaws Let Malicious Spreadsheets Run Code Without Macro Warnings

Security researchers disclosed that malicious spreadsheets can execute arbitrary code in LibreOffice and Apache OpenOffice when Java support is enabled, bypassing the macro warning dialogs users typically receive. The vulnerability requires the program to have Java enabled and has been demonstrated as a proof of concept with no active exploitation reported.

Why it matters: Organizations and users relying on LibreOffice or OpenOffice with Java support are at risk of code execution through untrusted spreadsheet files; patch availability and the scope of affected versions should be verified immediately.

VendorsOracle
Source published
First seen by Cybersecurity Tracker

Source attribution

Glossary