Weekly edition	Kernel	Security	Distributions	Contact Us	Search
Archives	Calendar	Subscribe	Write for LWN	LWN.net FAQ	Sponsors

OpenOffice.org: bypass security settings

Package(s):

openoffice.org

CVE #(s):

CVE-2005-4636

Created:

February 3, 2006

Updated:

February 7, 2006

Description:

OpenOffice.org 2.0 and earlier, when hyperlinks has been disabled, does not prevent the user from clicking the WWW-browser button in the Hyperlink dialog, which makes it easier for attackers to trick the user into bypassing intended security settings.

Alerts:

Mandriva

MDKSA-2006:033

2006-02-02

(Log in to post comments)