TI-2021-10755 Aliases CVE-2021-30245 GHSA-2qf7-45r5-qhqx

Code execution in Apache OpenOffice via non-http(s) schemes in Hyperlinks

MEDIUM 46CWE-610Published 2021-04-15 · Updated 2024-08-03

Key facts

Attack vector: Network
Privileges required: None
User interaction: Required
Attack complexity: Low
Impact type: —
Confidentiality · integrity · availability: High · High · High
Fix status: No fix listed

Attack profile from CVSS 3.1 · NVD. Fix status from CNA.

Summary

The project received a report that all versions of Apache OpenOffice through 4.1.8 can open non-http(s) hyperlinks. The problem has existed since about 2006 and the issue is also in 4.1.9. If the link is specifically crafted this could lead to untrusted code execution. It is always best practice to be careful opening documents from unknown and unverified sources. The mitigation in Apache OpenOffice 4.1.10 (unreleased) assures that a security warning is displayed giving the user the option of continuing to open the hyperlink.

Why it matters now

EPSS 0.04942 92nd percentileScored 2026-11-07

Fix No fix listed No fixed version in the sources yet

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

Vendor	Product	Affected versions	Fixed in	Status	Source
Apache	Apache OpenOffice	Apache OpenOffice – 4.1.9	—	No fix listed	CNA

Apache OpenOffice VendorApache Affected Apache OpenOffice – 4.1.9 Fixed in — No fix listed CNA

CPE configurations NVD · 1

CPE	Versions	Role	Vendor
cpe:2.3:a:apache:openoffice::::::::	up to 4.1.8	Vulnerable	Apache

cpe:2.3:a:apache:openoffice:*:*:*:*:*:*:*:* Versions up to 4.1.8 Vulnerable ·Apache

Remediation

No fixed version listed by the sources yet.

Timeline

2026-10-02 Threatist record created from CVE-2021-30245
2026-10-03 Alias added: GHSA-2qf7-45r5-qhqx

References

Patch 1

https://lists.apache.org/thread.html/r87ff11512e4883052991e6b725e20294224034ea8453b811fb3ee735%40%3Cusers.openoffice.apache.org%3E

Other 4

TI-2018-07474 An information disclosure vulnerability occurs when LibreOffice 6.0.3 and Apache… CVSS 3.0HIGH 7.5
TI-2021-12639 Buffer overflow from a crafted DBF file CVSS 3.1HIGH 7.8
TI-2014-02850 Apache OpenOffice before 4.1.1 allows remote attackers to execute arbitrary commands and… CVSS 2.0HIGH 9.3
TI-2009-02810 Heap-based buffer overflow in the GIFLZWDecompressor::GIFLZWDecompressor function in… CVSS 2.0HIGH 9.3
TI-2009-02809 Integer overflow in the XPMReader::ReadXPM function in filter.vcl/ixpm/svt_xpmread.cxx in… CVSS 2.0HIGH 9.3
TI-2009-03144 filter/ww8/ww8par2.cxx in OpenOffice.org (OOo) before 3.2 allows remote attackers to… CVSS 2.0HIGH 9.3

See all 71 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences