LibreOffice and OpenOffice Flaws Let Malicious Spreadsheets Run Code Without Macro Warnings

Researchers showed that a malicious spreadsheet can run an attacker's code as soon as it is opened in LibreOffice and Apache OpenOffice, with no macro warning. The attack works only when Java support is enabled and has so far been demonstrated only as a proof of concept.

• Malicious spreadsheet executes code immediately on opening
• No macro warning is shown to the user
• Attack requires Java support to be enabled
• Demonstrated only as a proof of concept so far