QwikSec

Security Database

CVE

CWE

Training

CVE-2021-40439

Published: Oct 7, 2021

Modified: Aug 4, 2024

PUBLISHED

Description

Apache OpenOffice has a dependency on expat software. Versions prior to 2.1.0 were subject to CVE-2013-0340 a "Billion Laughs" entity expansion denial of service attack and exploit via crafted XML files. ODF files consist of a set of XML files. All versions of Apache OpenOffice up to 4.1.10 are subject to this issue. expat in version 4.1.11 is patched.

Vendor	Product	Versions
Apache Software Foundation	Apache OpenOffice	affected `Apache OpenOffice - <= 4.1.10` affected `OpenOffice.org - <= 3.4`

Weaknesses (CWE)

References

https://lists.apache.org/thread.html/rfb2c193360436e230b85547e85a41bea0916916f96c501f5b6fc4702%40%3Cusers.openoffice.apache.org%3E

x_refsource_MISC

[announce] 20211007 CVE-2021-40439: Apache OpenOffice: Billion Laughs

mailing-list

x_refsource_MLIST

[openoffice-users] 20211007 CVE-2021-40439: Apache OpenOffice: Billion Laughs

mailing-list

x_refsource_MLIST

[oss-security] 20211007 CVE-2021-40439: Apache OpenOffice: Billion Laughs

mailing-list

x_refsource_MLIST

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.