CVE-2025-64407
MediumCVSS 5.3Exploitation Probability (EPSS)
Low risk41th percentile - higher than 41% of all known CVEs
Summary
A missing authorization vulnerability in Apache OpenOffice allows an attacker to craft a document that causes external links to be loaded without prompting the user. Such links could also be used to transmit system information, such as environment variables or configuration settings.
Risk Assessment
Opening a crafted document may lead to leakage of system configuration data without the user's knowledge. This could reveal information useful for further attacks.
Recommendation
Upgrade Apache OpenOffice to version 4.1.16 or later. Avoid opening documents from untrusted sources.
Other vulnerabilities in Apache OpenOffice
See all- CVE-2014-3524High
Apache OpenOffice before 4.1.1 allows remote attackers to execute arbitrary commands and possibly have other unspecified impact via a crafted Calc spreadsheet.
- CVE-2026-59265High
A code execution issue in the Java integration in Apache OpenOffice v4.1.16 and earlier allows a crafted untrusted document to trigger executing arbitrary (even remote) code when opened by the user. The issue is expected to be fixed in version 4.1.17, which is in the release candidate phase.
- CVE-2025-64406Medium
An out-of-bounds write vulnerability in Apache OpenOffice through 4.1.15 could allow an attacker to craft a document that crashes the program or corrupts other memory areas.
- CVE-2025-64405High
A missing authorization vulnerability in Apache OpenOffice allowed an attacker to craft a document that would cause external links to be loaded without prompt. In affected versions through 4.1.15, Calc spreadsheets containing DDE links to external files would load their contents without user permission.
- CVE-2025-64404High
A missing authorization vulnerability in Apache OpenOffice allowed an attacker to craft a document that would cause external links to be loaded without prompt. In affected versions through 4.1.15, documents using background fill images or bullet images linked to external files would load their contents without user permission.
- CVE-2025-64403High
A missing authorization vulnerability in Apache OpenOffice Calc allowed an attacker to craft a document that would cause external data source links to be loaded without prompt. This issue affects versions through 4.1.15.
- CVE-2025-64402Medium
Apache OpenOffice contains a missing authorization vulnerability that allows an attacker to craft a document causing external links to be loaded without prompting the user. Documents with OLE objects linked to external files would load their contents without user permission.
- CVE-2025-64401High
A missing authorization vulnerability in Apache OpenOffice allowed an attacker to craft a document that would cause external links to be loaded without prompting the user. In affected versions, documents using 'floating frames' linked to external files loaded their contents without user permission. The issue is fixed in version 4.1.16.
Original NVD description (English source)
Apache OpenOffice documents can contain links. A missing Authorization vulnerability in Apache OpenOffice allowed an attacker to craft a document that would cause external links to be loaded without prompt. Such links could also be used to transmit system information, such as environment variables or configuration settings. In the affected versions of Apache OpenOffice, documents that used a certain URI scheme linking to external files would load the contents of such files without prompting the user for permission to do so. Such URI scheme allows to include system configuration data, that is not supposed to be transmitted externally. This issue affects Apache OpenOffice: through 4.1.15. Users are recommended to upgrade to version 4.1.16, which fixes the issue. The LibreOffice suite reported this issue as CVE-2024-12426.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS