OpenOffice.org (OOo) Office Suite allows user-assisted remote attackers to execute arbitrary commands via shell metacharacters in a prepared link in a crafted document.
CVSS Details
- CVSS 3.1 Base Score: 9.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Apache Openoffice | — | Upgrade Apache OpenOffice to the latest version | Sep 12, 2025 | Mar 21, 2007 |
| Gentoo Linux | — | Upgrade app-office/openoffice.Upgrade app-office/openoffice-bin. | Oct 30, 2017 | Mar 21, 2007 |
| Suse | — | Upgrade libreoffice-monoUpgrade libreoffice-base-extensionsUpgrade libreoffice-sdkUpgrade libreoffice-testtoolUpgrade libreoffice-l10n-prebuiltUpgrade libreoffice-writer-extensionsUpgrade libreoffice-mailmergeUpgrade libreoffice-draw-extensionsUpgrade libreoffice-officebeanUpgrade libreoffice-filters-optionalUpgrade libreoffice-baseUpgrade libreoffice-drawUpgrade libreoffice-impressUpgrade libreoffice-gnomeUpgrade libreoffice-pyunoUpgrade libreoffice-kdeUpgrade libreoffice-writerUpgrade libreoffice-base-drivers-postgresqlUpgrade libreofficeUpgrade libreoffice-kde4Upgrade libreoffice-impress-extensionsUpgrade libreoffice-mathUpgrade libreoffice-calc-extensionsUpgrade libreoffice-calc | Feb 17, 2015 | Jun 27, 2013 |
| Ubuntu | — | Upgrade openoffice.org2-baseUpgrade ia32-libs-openoffice.orgUpgrade openoffice.org2-coreUpgrade openoffice.org2-calcUpgrade openoffice.org-calcUpgrade openoffice.org-core | Nov 8, 2024 | Mar 21, 2007 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub