Vulnerability Details CVE-2005-4636
OpenOffice.org 2.0 and earlier, when hyperlinks has been disabled, does not prevent the user from clicking the WWW-browser button in the Hyperlink dialog, which makes it easier for attackers to trick the user into bypassing intended security settings.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 22.2%
CVSS Severity
CVSS v2 Score 4.6
References
- http://qa.openoffice.org/issues/show_bug.cgi?id=53491
- http://securitytracker.com/id?1015419
- http://www.mandriva.com/security/advisories?name=MDKSA-2006:033
- http://qa.openoffice.org/issues/show_bug.cgi?id=53491
- http://securitytracker.com/id?1015419
- http://www.mandriva.com/security/advisories?name=MDKSA-2006:033
Products affected by CVE-2005-4636
-
cpe:2.3:a:openoffice:openoffice:1.0.1
-
cpe:2.3:a:openoffice:openoffice:1.0.2
-
cpe:2.3:a:openoffice:openoffice:1.1.0
-
cpe:2.3:a:openoffice:openoffice:1.1.1
-
cpe:2.3:a:openoffice:openoffice:1.1.2
-
cpe:2.3:a:openoffice:openoffice:1.1.3
-
cpe:2.3:a:openoffice:openoffice:1.1.4
-
cpe:2.3:a:openoffice:openoffice:1.1.5
-
cpe:2.3:a:openoffice:openoffice:2.0