LibreOffice and OpenOffice Flaws Let Malicious Spreadsheets Run Code Without Macro Warnings

Security researchers have shown that a malicious spreadsheet can make LibreOffice and Apache OpenOffice execute attacker code as soon as the file is opened, with no macro warning shown first. The attack requires Java support to be enabled and has so far only been demonstrated as a proof of concept, The Hacker News reports.