Multiple integer overflows in OpenOffice.org (OOo) 2.0.4 and earlier, and possibly other versions before 2.1.0; and StarOffice 6 through 8; allow user-assisted remote attackers to execute arbitrary code via a crafted (a) WMF or (b) EMF file that triggers heap-based buffer overflows in (1) wmf/winwmf.cxx, during processing of META_ESCAPE records; and wmf/enhwmf.cxx, during processing of (2) EMR_POLYPOLYGON and (3) EMR_POLYPOLYGON16 records.
CVSS Details
- CVSS 3.1 Base Score: 8.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Apache Openoffice | — | Upgrade Apache OpenOffice to the latest version | Sep 12, 2025 | Jan 4, 2007 |
| Gentoo Linux | — | Upgrade app-office/openoffice-bin.Upgrade app-office/openoffice. | Oct 30, 2017 | Dec 31, 2006 |
| Suse | — | Upgrade libsmbclient-64bitUpgrade sabayonUpgrade openobex-develUpgrade samba-krb-printingUpgrade OpenOffice_orgUpgrade gtk-sharp-completeUpgrade gstreamer010-plugins-baseUpgrade OpenOffice_org-arUpgrade NetworkManager-openvpnUpgrade gstreamer010-plugins-base-visual-32bitUpgrade samba-x86Upgrade gtk-sharp-32bitUpgrade libgail-gnomeUpgrade gtk-sharpUpgrade plannerUpgrade xglUpgrade glib2-x86Upgrade gdb-x86Upgrade samba-clientUpgrade openobexUpgrade rsvg-sharpUpgrade samba-winbind-32bitUpgrade gstreamer010-plugins-base-docUpgrade samba-64bitUpgrade NetworkManager-gnomeUpgrade gstreamer010-plugins-base-oil-32bitUpgrade OpenOffice_org-gu-INUpgrade gnome-filesystemUpgrade gconf-sharpUpgrade gnome-sharpUpgrade dhcp-serverUpgrade libgail-gnome-develUpgrade gstreamer010-plugins-base-develUpgrade contact-lookup-appletUpgrade samba-client-32bitUpgrade helix-dbus-serverUpgrade evolution-webcalUpgrade gnome-backgroundsUpgrade glib2-64bitUpgrade OpenOffice_org-caUpgrade gdb-64bitUpgrade wbxml2Upgrade samba-winbindUpgrade glib2-docUpgrade libbeagle-32bitUpgrade gdb-32bitUpgrade glib2Upgrade libsmbclientUpgrade OpenOffice_org-csUpgrade dhcp-clientUpgrade tomboyUpgrade sambaUpgrade libmsrpc-develUpgrade glade-sharpUpgrade OpenOffice_org-itUpgrade OpenOffice_org-kdeUpgrade libtool-32bitUpgrade OpenOffice_org-monoUpgrade gstreamer010-plugins-base-32bitUpgrade libipoddeviceUpgrade libtool-64bitUpgrade gstreamer010-plugins-base-x86Upgrade samba-pdbUpgrade audit-libs-64bitUpgrade beagle-firefoxUpgrade dhcp-develUpgrade samba-client-x86Upgrade art-sharpUpgrade inkscapeUpgrade OpenOffice_org-hi-INUpgrade OpenOffice_org-zh-TWUpgrade OpenOffice_org-fiUpgrade audit-develUpgrade auditUpgrade OpenOffice_org-zh-CNUpgrade gstreamer010-plugins-base-64bitUpgrade samba-docUpgrade audit-libs-32bitUpgrade OpenOffice_org-frUpgrade gnome-gamesUpgrade OpenOffice_org-daUpgrade audit-libs-x86Upgrade beagle-evolutionUpgrade OpenOffice_org-skUpgrade gftpUpgrade audit-libs-pythonUpgrade libtoolUpgrade OpenOffice_org-pt-BRUpgrade dhcp-relayUpgrade linphone-appletUpgrade OpenOffice_org-de-templatesUpgrade NetworkManager-vpncUpgrade OpenOffice_org-esUpgrade OpenOffice_org-nldUpgrade gaimUpgrade libsmbclient-develUpgrade glib2-32bitUpgrade samba-32bitUpgrade resappletUpgrade libbeagle-64bitUpgrade libbeagleUpgrade dhcpUpgrade libbeagle-x86Upgrade samba-winbind-64bitUpgrade samba-winbind-x86Upgrade OpenOffice_org-ruUpgrade samba-vscanUpgrade libipoddevice-32bitUpgrade OpenOffice_org-nnUpgrade evolutionUpgrade OpenOffice_org-plUpgrade beagleUpgrade libmsrpcUpgrade NetworkManagerUpgrade gaim-develUpgrade glib-sharpUpgrade beagle-guiUpgrade pwlibUpgrade samba-client-64bitUpgrade OpenOffice_org-nlUpgrade audit-libsUpgrade libsmbclient-x86Upgrade cifs-mountUpgrade OpenOffice_org-afUpgrade OpenOffice_org-nbUpgrade libtool-x86Upgrade NetworkManager-develUpgrade evolution-develUpgrade gdbUpgrade glib2-develUpgrade gnopernicusUpgrade linphoneUpgrade gnopernicus-develUpgrade gtk-sharp-gapiUpgrade OpenOffice_org-zuUpgrade OpenOffice_org-xhUpgrade vte-sharpUpgrade planner-develUpgrade libbeagle-develUpgrade samba-pythonUpgrade gstreamer010-plugins-base-oilUpgrade diaUpgrade gtkhtml-sharpUpgrade evolution-pilotUpgrade f-spotUpgrade gnomedb-sharpUpgrade OpenOffice_org-jaUpgrade gda-sharpUpgrade OpenOffice_org-deUpgrade NetworkManager-glibUpgrade OpenOffice_org-svUpgrade OpenOffice_org-gnomeUpgrade gstreamer010-plugins-base-visualUpgrade pwlib-develUpgrade libsmbclient-32bitUpgrade OpenOffice_org-huUpgrade compizUpgrade evolution-exchangeUpgrade xgl-hardware-listUpgrade sabayon-adminUpgrade OpenOffice_org-galleriesUpgrade libgdiplus | Feb 17, 2015 | Dec 31, 2006 |
| Ubuntu | — | Upgrade openoffice.org2-coreUpgrade openoffice.org-core | Nov 8, 2024 | Dec 31, 2006 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub