LibreOffice and OpenOffice Flaws Let Malicious Spreadsheets Run Code Without Macro Warnings

Security researchers have discovered a vulnerability in LibreOffice and Apache OpenOffice that allows a malicious spreadsheet to execute an attacker's code without warning when the file is opened. This attack does not trigger the usual macro warning that these programs display before running macros. The vulnerability is dependent on the program's Java support being enabled. The attack has currently only been demonstrated as a proof of concept and there are no known instances of it being used in actual attacks. The lack of a warning before code execution makes this vulnerability particularly concerning.