Vulnerability Spotlight: Open Office Impress Meta Actions Arbitrary Read Write Vulnerability
Summary: Cisco Talos discovered an exploitable out-of-bounds vulnerability in OpenOffice Impress when handling MetaActions, tracked as TALOS-2016-0051 / CVE-2016-1513. A specially crafted .ODP or .OTP file can cause an out-of-bounds read/write leading to memory corruption, application crash, and possible execution of arbitrary code, and the only bounds check at line 220 is an assert enabled only in debug mode.
Key Takeaway: OpenOffice reports over 84 million users and more than 125 million downloads, 87% of them on Microsoft Windows, and an attacker only needs to convince one of them to open a malicious file sent as a phishing attachment or hosted on a web server.
Read the original at Cisco Talos ↗
- Topics
- Supply Chain & AppSec
- Mentions
- CVE-2016-1513
- Related
- Kitesurf is now open source Cyber Risks · Nov 13, 2026Trained to betray: How post-training supply chain attacks hijack coding agents Cyber Risks · Nov 12, 2026ZDI-26-913: (0Day) Meta fairseq load_audio_path Code Injection Remote Code Execution Vulnerability Cyber Risks · Nov 11, 2026