CVE-2005-4636

OpenOffice.org 2.0 and earlier, when hyperlinks has been disabled, does not prevent the user from clicking the WWW-browser button in the Hyperlink dialog, which makes it easier for attackers to trick the user into bypassing intended security settings.

Published: Dec 31, 2005
Updated: Apr 13, 2023
CVE: CVE-2005-4636
Severity: Low
Exploit:

CVSS v2:

Severity: Low
Score: 4.6
AV:L/AC:L/Au:N/C:P/I:P/A:P

No CWE or OWASP classifications available.

Affected Software
References

Software	From	Fixed in
openoffice / openoffice	1.0.2	1.0.2.x
openoffice / openoffice	1.1.1	1.1.1.x
openoffice / openoffice	1.1.2	1.1.2.x
openoffice / openoffice	1.0.1	1.0.1.x
openoffice / openoffice	2.0	2.0.x
openoffice / openoffice	1.1.4	1.1.4.x
openoffice / openoffice	1.1.0	1.1.0.x
openoffice / openoffice	1.1.3	1.1.3.x
openoffice / openoffice	1.1.5	1.1.5.x

http://qa.openoffice.org/issues/show_bug.cgi?id=53491
http://securitytracker.com/id?1015419
http://www.mandriva.com/security/advisories?name=MDKSA-2006:033

Vulnerability Database

289,784

CVE-2005-4636