LibreOffice and OpenOffice Flaws Let Malicious Spreadsheets Run Code Without Macro Warnings

Security researchers demonstrated that a malicious spreadsheet can make LibreOffice and Apache OpenOffice execute an attacker's code immediately upon opening, without the usual macro warning. The attack requires Java support to be enabled and has only been proven as a proof of concept, with no reports of real-world exploitation yet.