Apache OpenOffice: Uncontrolled search path element vulnerability in Windows installer

Özet

Türkçe özeti henüz hazır değil; şimdilik kaynağın kendi açıklamasını gösteriyoruz.

The Windows installers of Apache OpenOffice 4.1.16 and earlier allow an already manipulated system to run external code with elevated access.
Users are recommended to upgrade to version 4.1.17, which fixes this issue.

Etkilenen sürümler1 yazılım

Kaynaklar4 kaynak

• CVE.org kaydı
• NVD kaydı
• lists.apache.org/thread.html/d4n33sjk8jgrr78jj5cq5r51fvxv6nnv Üretici bülteni
• openwall.com/lists/oss-security/2026/11/03/22 Diğer

Kayıt geçmişi

1. 4 Kas 2026 17:40CVSS puanı değişti: – → 7.8
2. 4 Kas 2026 14:02Yayımlandı

İlgili açıklar

• 5,8 CVE-2026-59267Apache OpenOffice: Heap Buffer Overflow in DXF LWPOLYLINE import could cause memory corruption
• 5,5 CVE-2026-90632Apache OpenOffice: Local file inclusion via GStreamer plugin
• 7,3 CVE-2026-90634Apache OpenOffice: Out-of-bounds write when importing encrypted PDF files
• 3,3 CVE-2026-90631Apache OpenOffice: Remote document loaded without prompt, possibiy leaking environment variables
• 7,3 CVE-2026-90629Apache OpenOffice: Out of bounds memory access during WMF import
• 7,3 CVE-2026-90628Apache OpenOffice: Stack overflow in CFF hint handling