CVE Vulnerabilities

CVE-2005-4636

Published: Dec 31, 2005 | Modified: Nov 12, 2009
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
4.6 MEDIUM
AV:L/AC:L/Au:N/C:P/I:P/A:P
RedHat/V2
RedHat/V3
Ubuntu

OpenOffice.org 2.0 and earlier, when hyperlinks has been disabled, does not prevent the user from clicking the WWW-browser button in the Hyperlink dialog, which makes it easier for attackers to trick the user into bypassing intended security settings.

Affected Software

Name Vendor Start Version End Version
Openoffice Openoffice 1.0.1 (including) 1.0.1 (including)
Openoffice Openoffice 1.0.2 (including) 1.0.2 (including)
Openoffice Openoffice 1.1.0 (including) 1.1.0 (including)
Openoffice Openoffice 1.1.1 (including) 1.1.1 (including)
Openoffice Openoffice 1.1.2 (including) 1.1.2 (including)
Openoffice Openoffice 1.1.3 (including) 1.1.3 (including)
Openoffice Openoffice 1.1.4 (including) 1.1.4 (including)
Openoffice Openoffice 1.1.5 (including) 1.1.5 (including)
Openoffice Openoffice 2.0 (including) 2.0 (including)

References