Vulnerabilityhigh

Apache OpenOffice users should upgrade to newest security release!

Help Net Securityby @zeljkazorzApr 22, 2025 · 12:07 UTC (Apr 22, 2025)1 min read3 · 1 read

Read at helpnetsecurity.com

Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

CVEs: CVE-2021-33035 CVE-2021-40439 CVE-2021-41830 CVE-2021-41832 CVE-2021-41831 CVE-2021-28129

Tags: cve-2021-33035 cve-2021-40439 cve-2021-41830 cve-2021-41832 cve-2021-41831 vulnerability

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Published
CVE-2021-28129 +1 related CVE CVE-2021-40439	While working on Apache OpenOffice 4.1.8 a developer discovered that the DEB package did not install using root, but instead used a userid and groupid of 500	7.8 group max	<1%	Oct 7, 2021
CVE-2021-33035	Apache OpenOffice opens dBase/DBF documents and shows the contents as spreadsheets	7.8	51%	Sep 23, 2021
CVE-2021-41830 +2 related CVEs CVE-2021-41832 CVE-2021-41831	It is possible for an attacker to manipulate signed documents and macros to appear to come from a trusted source	7.5 group max	1%	Oct 11, 2021

From the original article

1 min read at helpnetsecurity.com

The Apache Software Foundation (ASF) has released Apache OpenOffice 4. 1. 11, which fixes a handful of security vulnerabilities, including CVE-2021-33035, a recently revealed RCE vulnerability that could be triggered via a specially crafted document.

Help Net Security

By @zeljkazorz · helpnetsecurity.com

Read the full article at Help Net Security

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.