CNNVD-202511-1504 Information
CNNVD ID
CNNVD-202511-1504
Related CVE
- CNNVD Published: 2025-11-12
Description (Chinese)
Apache OpenOffice是美国阿帕奇(Apache)基金会的一款开源的办公软件套件。该套件包含文本文档、电子表格、演示文稿、绘图、数据库等。 Apache OpenOffice 4.1.15及之前版本存在安全漏洞,该漏洞源于缺少授权检查,可能导致外部数据源链接被自动加载。
Description (English)
Apache OpenOffice is an open-source office software package for the Apache Foundation in the United States. The package contains text documents, spreadsheets, presentations, drawings, databases, etc. There is a security gap in Apache OpenOffice 4.1.15 and earlier versions, which stems from a lack of authorization checks and may lead to automatic loading of external data source links.
Hazard Level
High
Vulnerability Type
其他
Affected Vendor
阿帕奇
Published
2025-11-12
Last Modified
2026-02-24
References
https://www.openoffice.org/security/cves/CVE-2025-64403.html https://lists.apache.org/thread/t7c6jhvdb00xtgd9vvn7h5sq9f4h5trt http://www.openwall.com/lists/oss-security/2025/11/11/6 https://access.redhat.com/security/cve/cve-2025-64403
Patch
https://www.openoffice.org/download/
Share on: