Multiple vulnerabilities in OpenOffice

Description

Multiple vulnerabilities were found in OpenOffice. Malicious users can exploit these vulnerabilities to cause denial of service, execute arbitrary code.

Below is a complete list of vulnerabilities:

1. Denial of service vulnerability can be exploited to cause denial of service.
2. Remote code execution vulnerability can be exploited remotely to execute arbitrary code.
3. Improper Input Validation vulnerability in hsqldb can be exploited to execute arbitrary code.
4. Use after free vulnerability in expat can be exploited to cause denial of service or execute arbitrary code.

Original advisories

• CVE-2022-43680

• CVE-2012-5639
• CVE-2023-47804
• CVE-2023-1183

Exploitation

Public exploits exist for this vulnerability.

CVE list

• CVE-2022-43680
  critical
• CVE-2012-5639
  high
• CVE-2023-1183
  high
• CVE-2023-47804
  critical

Read more

Find out the statistics of the vulnerabilities spreading in your region on statistics.securelist.com