Multiple directory traversal vulnerabilities in OpenOffice.org (OOo) 2.x and 3.x before 3.3 allow remote attackers to overwrite arbitrary files via a .. (dot dot) in an entry in (1) an XSLT JAR filter description file, (2) an Extension (aka OXT) file, or unspecified other (3) JAR or (4) ZIP files.
CVSS Details
- CVSS 3.1 Base Score: 9.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Apache Openoffice | — | Upgrade Apache OpenOffice to the latest version | Sep 12, 2025 | Jan 28, 2011 |
| Centos_linux | — | Upgrade openoffice.org-langpack-sk_SKUpgrade openoffice.org-langpack-pl_PLUpgrade openoffice.org-javafilterUpgrade openoffice.org2-langpack-itUpgrade openoffice.org2-langpack-svUpgrade openoffice.org2-langpack-zu_ZAUpgrade openoffice.org2-langpack-gl_ESUpgrade openoffice.org2-langpack-et_EEUpgrade openoffice.org2-langpack-nn_NOUpgrade openoffice.org2-drawUpgrade openoffice.org2-langpack-sk_SKUpgrade openoffice.org-langpack-xh_ZAUpgrade openoffice.org2-langpack-da_DKUpgrade openoffice.org-langpack-kn_INUpgrade openoffice.org2-langpack-nlUpgrade openoffice.org-langpack-cy_GBUpgrade openoffice.org-langpack-frUpgrade openoffice.org-langpack-eu_ESUpgrade openoffice.org-langpack-ta_INUpgrade openoffice.org-langpack-ruUpgrade openoffice.org2-langpack-cy_GBUpgrade openoffice.org2-mathUpgrade openoffice.org2-langpack-arUpgrade openoffice.org2-langpack-cs_CZUpgrade openoffice.org2-langpack-bnUpgrade openoffice.org-ureUpgrade openoffice.org2-langpack-sl_SIUpgrade openoffice.org-mathUpgrade openoffice.org-langpack-nn_NOUpgrade openoffice.org2-writerUpgrade openoffice.org-langpack-nb_NOUpgrade openoffice.org-langpack-svUpgrade openoffice.org-langpack-ca_ESUpgrade openoffice.org-langpack-nlUpgrade openoffice.org-langpack-ts_ZAUpgrade openoffice.org2-langpack-zh_TWUpgrade openoffice.org-langpack-zh_CNUpgrade openoffice.org2-langpack-frUpgrade openoffice.org2-langpack-sr_CSUpgrade openoffice.org2-graphicfilterUpgrade openoffice.org2-langpack-ruUpgrade openoffice.orgUpgrade openoffice.org-langpack-lt_LTUpgrade openoffice.org2-langpack-pl_PLUpgrade openoffice.org-langpack-el_GRUpgrade openoffice.org-langpack-pt_PTUpgrade openoffice.org2-langpack-ta_INUpgrade openoffice.org-langpack-mr_INUpgrade openoffice.org-coreUpgrade openoffice.org2-langpack-ja_JPUpgrade openoffice.org-langpack-gl_ESUpgrade openoffice.org2-langpack-af_ZAUpgrade openoffice.org-writerUpgrade openoffice.org-langpack-ms_MYUpgrade openoffice.org-xsltfilterUpgrade openoffice.org-langpack-itUpgrade openoffice.org2-langpack-zh_CNUpgrade openoffice.org-langpack-ja_JPUpgrade openoffice.org-langpack-pt_BRUpgrade openoffice.org-langpack-da_DKUpgrade openoffice.org-sdk-docUpgrade openoffice.org-pyunoUpgrade openoffice.org2-langpack-th_THUpgrade openoffice.org-langpack-st_ZAUpgrade openoffice.org-langpack-af_ZAUpgrade openoffice.org-langpack-esUpgrade openoffice.org-impressUpgrade openoffice.org-langpack-ko_KRUpgrade openoffice.org2-langpack-gu_INUpgrade openoffice.org2-impressUpgrade openoffice.org2-langpack-hi_INUpgrade openoffice.org-langpack-bg_BGUpgrade openoffice.org-langpack-bnUpgrade openoffice.org-langpack-tn_ZAUpgrade openoffice.org-langpack-nso_ZAUpgrade openoffice.org-graphicfilterUpgrade openoffice.org-langpack-te_INUpgrade openoffice.org-langpack-hi_INUpgrade openoffice.org2-langpack-nb_NOUpgrade openoffice.org2-xsltfilterUpgrade openoffice.org-langpack-he_ILUpgrade openoffice.org-testtoolsUpgrade openoffice.org-langpack-nr_ZAUpgrade openoffice.org-langpack-ga_IEUpgrade openoffice.org-drawUpgrade openoffice.org-langpack-zu_ZAUpgrade openoffice.org-langpack-sr_CSUpgrade openoffice.org-baseUpgrade openoffice.org2-langpack-ko_KRUpgrade openoffice.org-langpack-gu_INUpgrade openoffice.org-langpack-ml_INUpgrade openoffice.org-langpack-et_EEUpgrade openoffice.org-kdeUpgrade openoffice.org-langpack-ve_ZAUpgrade openoffice.org-libsUpgrade openoffice.org-langpack-urUpgrade openoffice.org-langpack-sl_SIUpgrade openoffice.org-langpack-hu_HUUpgrade openoffice.org-langpack-th_THUpgrade openoffice.org2-langpack-pa_INUpgrade openoffice.org-langpack-as_INUpgrade openoffice.org2-langpack-fi_FIUpgrade openoffice.org2-langpack-esUpgrade openoffice.org2-javafilterUpgrade openoffice.org2-baseUpgrade openoffice.org-calcUpgrade openoffice.org2-coreUpgrade openoffice.org2-langpack-lt_LTUpgrade openoffice.org-langpack-tr_TRUpgrade openoffice.org-headlessUpgrade openoffice.org2-calcUpgrade openoffice.org-langpack-pa_INUpgrade openoffice.org2-langpack-he_ILUpgrade openoffice.org2-langpack-hr_HRUpgrade openoffice.org-langpack-fi_FIUpgrade openoffice.org-langpack-hr_HRUpgrade openoffice.org2-langpack-ca_ESUpgrade openoffice.org2-langpack-pt_BRUpgrade openoffice.org-langpack-arUpgrade openoffice.org2-langpack-pt_PTUpgrade openoffice.org-langpack-cs_CZUpgrade openoffice.org2-langpack-hu_HUUpgrade openoffice.org-langpack-deUpgrade openoffice.org2-pyunoUpgrade openoffice.org-langpack-ss_ZAUpgrade openoffice.org2-emailmergeUpgrade openoffice.org2-langpack-deUpgrade openoffice.org2-langpack-el_GRUpgrade openoffice.org2-langpack-tr_TRUpgrade openoffice.org2-langpack-ms_MYUpgrade openoffice.org-langpack-or_INUpgrade openoffice.org2-langpack-bg_BGUpgrade openoffice.org-i18nUpgrade openoffice.org2-langpack-ga_IEUpgrade openoffice.org-sdkUpgrade openoffice.org2-langpack-eu_ESUpgrade openoffice.org-langpack-zh_TWUpgrade openoffice.org2-testtoolsUpgrade openoffice.org-emailmerge | Dec 1, 2016 | Jan 28, 2011 |
| Gentoo Linux | — | Upgrade app-office/libreoffice-bin.Upgrade app-office/libreoffice.Upgrade app-office/openoffice-bin.Upgrade app-office/openoffice. | Oct 30, 2017 | Jan 28, 2011 |
| Oracle_linux | — | Upgrade openoffice.org-langpack-enUpgrade openoffice.org-brandUpgrade openoffice.org-langpack-ukUpgrade openoffice.org-pyunoUpgrade openoffice.org-baseUpgrade openoffice.org-langpack-cy_GBUpgrade openoffice.org-langpack-da_DKUpgrade openoffice.org-langpack-nlUpgrade autocorr-itUpgrade autocorr-slUpgrade openoffice.org-langpack-zu_ZAUpgrade autocorr-mnUpgrade autocorr-nlUpgrade openoffice.org-langpack-ml_INUpgrade autocorr-koUpgrade broffice.org-brandUpgrade broffice.org-impressUpgrade broffice.org-writerUpgrade autocorr-zhUpgrade openoffice.org-headlessUpgrade openoffice.org-langpack-tr_TRUpgrade openoffice.org-draw-coreUpgrade openoffice.org-pdfimportUpgrade openoffice.org-rhinoUpgrade openoffice.org-langpack-pt_BRUpgrade openoffice.org-langpack-et_EEUpgrade openoffice.org-langpack-itUpgrade openoffice.org-langpack-deUpgrade autocorr-jaUpgrade openoffice.org-langpack-hi_INUpgrade openoffice.org-langpack-gu_INUpgrade openoffice.org-langpack-as_INUpgrade openoffice.org-langpack-ss_ZAUpgrade autocorr-svUpgrade autocorr-trUpgrade openoffice.org-langpack-st_ZAUpgrade openoffice.org-langpack-cs_CZUpgrade autocorr-esUpgrade openoffice.org-wiki-publisherUpgrade openoffice.org-langpack-hu_HUUpgrade openoffice.org-langpack-th_THUpgrade openoffice.org-langpack-zh_TWUpgrade openoffice.org-langpack-hr_HRUpgrade openoffice.org-drawUpgrade openoffice.org-graphicfilterUpgrade openoffice.org-langpack-he_ILUpgrade openoffice.org-presenter-screenUpgrade openoffice.org-writer-coreUpgrade openoffice.org-testtoolsUpgrade autocorr-euUpgrade openoffice.org-bshUpgrade openoffice.org-langpack-bg_BGUpgrade autocorr-afUpgrade autocorr-enUpgrade openoffice.org-langpack-nr_ZAUpgrade openoffice.org-langpack-dzUpgrade openoffice.org-langpack-sl_SIUpgrade openoffice.org-langpack-or_INUpgrade autocorr-lbUpgrade openoffice.org-langpack-arUpgrade openoffice.org-mathUpgrade autocorr-ruUpgrade openoffice.org-langpack-paUpgrade openoffice.org-langpack-srUpgrade openoffice.org-sdkUpgrade openoffice.org-calc-coreUpgrade autocorr-fiUpgrade openoffice.org-javafilterUpgrade openoffice.org-report-builderUpgrade openoffice.org-xsltfilterUpgrade openoffice.org-math-coreUpgrade openoffice.org-opensymbol-fontsUpgrade openoffice.org-develUpgrade openoffice.org-langpack-zh_CNUpgrade openoffice.org-base-coreUpgrade openoffice.org-emailmergeUpgrade openoffice.org-langpack-pt_PTUpgrade openoffice.org-langpack-kn_INUpgrade openoffice.org-langpack-mai_INUpgrade openoffice.org-langpack-nn_NOUpgrade autocorr-csUpgrade openoffice.org-langpack-el_GRUpgrade autocorr-ltUpgrade openoffice.org-langpack-gl_ESUpgrade openoffice.org-langpack-nb_NOUpgrade broffice.org-calcUpgrade openoffice.org-langpack-sk_SKUpgrade openoffice.org-sdk-docUpgrade openoffice.org-langpack-tn_ZAUpgrade autocorr-frUpgrade openoffice.org-langpack-mr_INUpgrade openoffice.org-presentation-minimizerUpgrade autocorr-daUpgrade openoffice.org-langpack-bnUpgrade autocorr-plUpgrade openoffice.org-langpack-svUpgrade openoffice.org-impressUpgrade openoffice.org-coreUpgrade openoffice.org-langpack-frUpgrade openoffice.org-writerUpgrade autocorr-deUpgrade openoffice.org-langpack-fi_FIUpgrade broffice.org-drawUpgrade autocorr-huUpgrade autocorr-viUpgrade openoffice.org-langpack-roUpgrade openoffice.org-langpack-te_INUpgrade openoffice.org-calcUpgrade openoffice.org-langpack-af_ZAUpgrade openoffice.org-langpack-ga_IEUpgrade openoffice.org-langpack-ruUpgrade autocorr-ptUpgrade openoffice.org-langpack-ts_ZAUpgrade autocorr-gaUpgrade openoffice.org-langpack-nso_ZAUpgrade autocorr-bgUpgrade openoffice.org-langpack-xh_ZAUpgrade openoffice.org-langpack-eu_ESUpgrade autocorr-faUpgrade openoffice.org-langpack-ms_MYUpgrade openoffice.org-langpack-lt_LTUpgrade openoffice.org-langpack-ca_ESUpgrade openoffice.org-langpack-pl_PLUpgrade openoffice.org-langpack-urUpgrade openoffice.org-langpack-ko_KRUpgrade openoffice.org-langpack-ta_INUpgrade openoffice.org-impress-coreUpgrade broffice.org-baseUpgrade openoffice.org-langpack-ve_ZAUpgrade broffice.org-mathUpgrade openoffice.org-ureUpgrade autocorr-skUpgrade openoffice.org-langpack-ja_JPUpgrade openoffice.org-langpack-esUpgrade openoffice.org-ogltrans | Oct 16, 2024 | Jan 28, 2011 |
| Redhat_linux | — | — | Jul 9, 2025 | Jan 26, 2011 |
| Suse | — | Upgrade libreoffice-l10n-prebuiltUpgrade libreoffice-gnomeUpgrade libreoffice-drawUpgrade libreoffice-impressUpgrade libreoffice-kde4Upgrade libreoffice-baseUpgrade libreoffice-writerUpgrade libreoffice-base-extensionsUpgrade libreoffice-draw-extensionsUpgrade libreoffice-filters-optionalUpgrade libreoffice-writer-extensionsUpgrade libreoffice-sdkUpgrade libreoffice-pyunoUpgrade libreoffice-impress-extensionsUpgrade libreoffice-testtoolUpgrade libreoffice-calc-extensionsUpgrade libreoffice-monoUpgrade libreoffice-mathUpgrade libreoffice-mailmergeUpgrade libreoffice-base-drivers-postgresqlUpgrade libreoffice-officebeanUpgrade libreoffice-calcUpgrade libreofficeUpgrade libreoffice-kde | Feb 17, 2015 | Jun 28, 2013 |
| Ubuntu | — | Upgrade openoffice.org-writerUpgrade openoffice.org-coreUpgrade openoffice.org-impress | Nov 8, 2024 | Jan 28, 2011 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub