Cyber Risks · Cisco Talos

Vulnerability Spotlight: Apache Open Office Vulnerabilities

Summary: Cisco Talos discovered vulnerabilities in Apache OpenOffice, a free open source office suite, with technical details published in a Talos Vulnerability Report and an OpenOffice advisory. Talos notes that attackers commonly exploit word processor flaws through malicious email attachments that execute commands when a victim is socially engineered into opening the file, and it cites a recent campaign against South Korean users that used a Hangul Word Processor vulnerability as an example of this vector.

What's compelling: Talos says it has monitored many campaigns using this attack vector for targeted attacks, and the South Korean case shows a document exploit was enough to infect victims - a reminder that patching the operating system alone leaves the office suite exposed.

Read the original at Cisco Talos ↗

Topics
Phishing & Social Engineering
Related