Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
OpenOffice.org (OOo) before 2.1.0 does not properly verify the authenticity of updates, which allows man-in-the-middle attackers to execute arbitrary code via a Trojan horse update, as demonstrated by evilgrade and DNS cache poisoning.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
OpenOffice Update 代码注入漏洞
Vulnerability Description
OpenOffice.org是一套开源的跨平台的办公软件套件。 OpenOffice 2.1.0之前的版本没有正确地校验更新的真实性,存在代码注入漏洞。通过中间人攻击方式，可以利用此漏洞在升级中使用包含木马的更新，执行任意代码。
CVSS Information
N/A
Vulnerability Type
N/A