Apache OpenOffice: Local file inclusion via GStreamer plugin

Özet

Türkçe özeti yalnızca kritik ve yüksek önemdeki açıklar için hazırlıyoruz. Bu açık için kaynağın kendi açıklamasını gösteriyoruz.

Apache OpenOffice documents can include multimedia content (audio, video, etc.)

A crafted document could exploit the GStreamer multimedia component of Apache OpenOffice version through 4.1.16 to load the contents of any local file, and include them when the document is saved or exported, for example as PDF.

Users are recommended to upgrade to version 4.1.17, which fixes this issue.

Etkilenen sürümler1 yazılım

Kaynaklar4 kaynak

• CVE.org kaydı
• NVD kaydı
• lists.apache.org/thread.html/9rrjtmlnmg47m6soyrl83rz28dbsyqvk Üretici bülteni
• openwall.com/lists/oss-security/2026/11/03/31 Üçüncü taraf

Kayıt geçmişi

1. 4 Kas 2026 20:10CVSS puanı değişti: – → 5.5
2. 4 Kas 2026 14:05Yayımlandı

İlgili açıklar

• 5,8 CVE-2026-59267Apache OpenOffice: Heap Buffer Overflow in DXF LWPOLYLINE import could cause memory corruption
• 7,3 CVE-2026-90634Apache OpenOffice: Out-of-bounds write when importing encrypted PDF files
• 3,3 CVE-2026-90631Apache OpenOffice: Remote document loaded without prompt, possibiy leaking environment variables
• 7,3 CVE-2026-90629Apache OpenOffice: Out of bounds memory access during WMF import
• 7,3 CVE-2026-90628Apache OpenOffice: Stack overflow in CFF hint handling
• 5,5 CVE-2026-90627Apache OpenOffice: Local file inclusion via SQL provider and flat file database references