CVE-2005-4636: OpenOffice.org 2.0 and earlier, when hyperlinks has been disabled, does not prevent the user from clicking...

Security readout for executives and security teams

This is an old OpenOffice.org weakness where a setting meant to disable hyperlinks could still be bypassed through the Hyperlink dialog’s browser button. The risk is mainly user-assisted social engineering, not remote automatic compromise. It matters only where OpenOffice.org 2.0 or earlier remains in use or policy relied on hyperlink disabling. Exposure is likely limited to legacy OpenOffice.org 2.0 and earlier installations, especially managed desktops where administrators disabled hyperlinks as a security control. Modern systems are unlikely to be affected unless very old office software remains deployed. Treat this as low urgency unless legacy OpenOffice.org remains in production. The business risk is weak control enforcement that could aid phishing-like workflows, not evidence of active exploitation or high-impact compromise. Mitigation focus: Identify and retire OpenOffice.org 2.0 or earlier installations.; Apply vendor or distribution updates referencing CVE-2005-4636.; Review Mandriva or vendor guidance before assuming a specific fix..

Prepared

Jun 29, 2026, 15:20 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.