
LibreOffice and Apache OpenOffice Vulnerable to Code Execution via Malicious Spreadsheets
VulnerabilitiesSoftware SecurityZero-Day ExploitsOffice Applications
Security researchers have demonstrated that malicious spreadsheets can execute attacker code in LibreOffice and Apache OpenOffice immediately upon file opening without triggering macro warnings. The attack requires Java support to be enabled in the affected programs. The vulnerability has been demonstrated as a proof of concept only, with no reports of active exploitation in the wild.