Multiple off-by-one errors in the WW8DopTypography::ReadFromMem function in oowriter in OpenOffice.org (OOo) 2.x and 3.x before 3.3 allow remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via crafted typography information in a Microsoft Word .DOC file that triggers an out-of-bounds write.
CVSS Details
- CVSS 3.1 Base Score: 8.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Apache Openoffice | — | Upgrade Apache OpenOffice to the latest version | Sep 12, 2025 | Jan 28, 2011 |
| Centos_linux | — | Upgrade openoffice.org-langpack-bnUpgrade openoffice.org-langpack-sl_SIUpgrade openoffice.org2-langpack-lt_LTUpgrade openoffice.org2-baseUpgrade openoffice.org2-langpack-ja_JPUpgrade openoffice.org-langpack-urUpgrade openoffice.org-langpack-nn_NOUpgrade openoffice.org2-javafilterUpgrade openoffice.org2-testtoolsUpgrade openoffice.org-langpack-cy_GBUpgrade openoffice.org-langpack-itUpgrade openoffice.org-langpack-or_INUpgrade openoffice.org-impressUpgrade openoffice.org-testtoolsUpgrade openoffice.org2-langpack-ta_INUpgrade openoffice.org2-langpack-pt_PTUpgrade openoffice.org-ureUpgrade openoffice.org-emailmergeUpgrade openoffice.org2-langpack-sl_SIUpgrade openoffice.org2-mathUpgrade openoffice.org-langpack-arUpgrade openoffice.org-coreUpgrade openoffice.org-langpack-ko_KRUpgrade openoffice.org-langpack-ca_ESUpgrade openoffice.org2-langpack-he_ILUpgrade openoffice.org-langpack-nlUpgrade openoffice.org2-langpack-hi_INUpgrade openoffice.org2-langpack-ca_ESUpgrade openoffice.org2-langpack-ko_KRUpgrade openoffice.org-langpack-st_ZAUpgrade openoffice.org-langpack-pt_BRUpgrade openoffice.org-headlessUpgrade openoffice.org2-langpack-da_DKUpgrade openoffice.org-langpack-zh_TWUpgrade openoffice.org-langpack-ml_INUpgrade openoffice.org-langpack-nr_ZAUpgrade openoffice.orgUpgrade openoffice.org-langpack-sr_CSUpgrade openoffice.org2-langpack-pa_INUpgrade openoffice.org-langpack-deUpgrade openoffice.org2-langpack-af_ZAUpgrade openoffice.org2-langpack-nb_NOUpgrade openoffice.org-drawUpgrade openoffice.org-langpack-ruUpgrade openoffice.org-mathUpgrade openoffice.org-langpack-hr_HRUpgrade openoffice.org-sdkUpgrade openoffice.org-langpack-pl_PLUpgrade openoffice.org2-langpack-tr_TRUpgrade openoffice.org2-coreUpgrade openoffice.org-calcUpgrade openoffice.org-langpack-tr_TRUpgrade openoffice.org-langpack-mr_INUpgrade openoffice.org-langpack-da_DKUpgrade openoffice.org2-langpack-ga_IEUpgrade openoffice.org-langpack-eu_ESUpgrade openoffice.org-langpack-sk_SKUpgrade openoffice.org-langpack-bg_BGUpgrade openoffice.org-sdk-docUpgrade openoffice.org2-impressUpgrade openoffice.org-langpack-fi_FIUpgrade openoffice.org2-langpack-cs_CZUpgrade openoffice.org-baseUpgrade openoffice.org-langpack-gu_INUpgrade openoffice.org2-pyunoUpgrade openoffice.org-libsUpgrade openoffice.org2-emailmergeUpgrade openoffice.org2-langpack-th_THUpgrade openoffice.org-langpack-hi_INUpgrade openoffice.org2-langpack-ruUpgrade openoffice.org-langpack-zu_ZAUpgrade openoffice.org2-langpack-ms_MYUpgrade openoffice.org-langpack-esUpgrade openoffice.org-langpack-tn_ZAUpgrade openoffice.org2-langpack-cy_GBUpgrade openoffice.org-langpack-nso_ZAUpgrade openoffice.org2-langpack-itUpgrade openoffice.org-langpack-kn_INUpgrade openoffice.org2-langpack-frUpgrade openoffice.org-langpack-pt_PTUpgrade openoffice.org-langpack-ms_MYUpgrade openoffice.org-langpack-et_EEUpgrade openoffice.org-javafilterUpgrade openoffice.org-langpack-cs_CZUpgrade openoffice.org2-langpack-bg_BGUpgrade openoffice.org2-langpack-nlUpgrade openoffice.org2-langpack-bnUpgrade openoffice.org-langpack-as_INUpgrade openoffice.org-graphicfilterUpgrade openoffice.org2-langpack-zu_ZAUpgrade openoffice.org2-langpack-svUpgrade openoffice.org2-langpack-nn_NOUpgrade openoffice.org2-langpack-zh_CNUpgrade openoffice.org2-langpack-gu_INUpgrade openoffice.org2-calcUpgrade openoffice.org-langpack-te_INUpgrade openoffice.org-xsltfilterUpgrade openoffice.org-langpack-svUpgrade openoffice.org-writerUpgrade openoffice.org-langpack-zh_CNUpgrade openoffice.org2-langpack-arUpgrade openoffice.org-langpack-ts_ZAUpgrade openoffice.org2-langpack-el_GRUpgrade openoffice.org2-langpack-zh_TWUpgrade openoffice.org2-langpack-hu_HUUpgrade openoffice.org2-langpack-pl_PLUpgrade openoffice.org-langpack-pa_INUpgrade openoffice.org-langpack-ta_INUpgrade openoffice.org2-writerUpgrade openoffice.org-langpack-lt_LTUpgrade openoffice.org-langpack-ja_JPUpgrade openoffice.org2-langpack-et_EEUpgrade openoffice.org-langpack-af_ZAUpgrade openoffice.org2-langpack-sr_CSUpgrade openoffice.org-langpack-ga_IEUpgrade openoffice.org-langpack-xh_ZAUpgrade openoffice.org-langpack-gl_ESUpgrade openoffice.org2-drawUpgrade openoffice.org2-graphicfilterUpgrade openoffice.org2-langpack-sk_SKUpgrade openoffice.org-langpack-he_ILUpgrade openoffice.org2-langpack-esUpgrade openoffice.org2-xsltfilterUpgrade openoffice.org-langpack-nb_NOUpgrade openoffice.org-langpack-frUpgrade openoffice.org2-langpack-fi_FIUpgrade openoffice.org-i18nUpgrade openoffice.org-langpack-th_THUpgrade openoffice.org2-langpack-pt_BRUpgrade openoffice.org-langpack-ss_ZAUpgrade openoffice.org-pyunoUpgrade openoffice.org-langpack-el_GRUpgrade openoffice.org2-langpack-deUpgrade openoffice.org2-langpack-hr_HRUpgrade openoffice.org2-langpack-gl_ESUpgrade openoffice.org2-langpack-eu_ESUpgrade openoffice.org-kdeUpgrade openoffice.org-langpack-hu_HUUpgrade openoffice.org-langpack-ve_ZA | Dec 1, 2016 | Jan 28, 2011 |
| Gentoo Linux | — | Upgrade app-office/openoffice.Upgrade app-office/openoffice-bin.Upgrade app-office/libreoffice-bin.Upgrade app-office/libreoffice. | Oct 30, 2017 | Jan 28, 2011 |
| Oracle_linux | — | Upgrade openoffice.org-headlessUpgrade openoffice.org-langpack-tn_ZAUpgrade broffice.org-writerUpgrade openoffice.org-langpack-hu_HUUpgrade openoffice.org-sdk-docUpgrade openoffice.org-langpack-nso_ZAUpgrade openoffice.org-langpack-mr_INUpgrade autocorr-slUpgrade openoffice.org-langpack-dzUpgrade autocorr-deUpgrade broffice.org-drawUpgrade openoffice.org-mathUpgrade openoffice.org-langpack-ca_ESUpgrade openoffice.org-langpack-pl_PLUpgrade openoffice.org-langpack-zh_TWUpgrade openoffice.org-langpack-pt_BRUpgrade openoffice.org-langpack-deUpgrade openoffice.org-langpack-as_INUpgrade openoffice.org-langpack-hi_INUpgrade openoffice.org-langpack-zu_ZAUpgrade autocorr-itUpgrade openoffice.org-langpack-et_EEUpgrade openoffice.org-langpack-arUpgrade openoffice.org-langpack-itUpgrade openoffice.org-wiki-publisherUpgrade openoffice.org-langpack-st_ZAUpgrade autocorr-enUpgrade openoffice.org-langpack-bg_BGUpgrade autocorr-lbUpgrade broffice.org-brandUpgrade autocorr-frUpgrade openoffice.org-langpack-ko_KRUpgrade openoffice.org-langpack-enUpgrade openoffice.org-langpack-hr_HRUpgrade openoffice.org-langpack-nlUpgrade openoffice.org-langpack-sl_SIUpgrade openoffice.org-langpack-ukUpgrade openoffice.org-bshUpgrade openoffice.org-baseUpgrade autocorr-zhUpgrade autocorr-koUpgrade autocorr-mnUpgrade openoffice.org-sdkUpgrade autocorr-bgUpgrade openoffice.org-impressUpgrade openoffice.org-langpack-nn_NOUpgrade autocorr-daUpgrade openoffice.org-drawUpgrade openoffice.org-langpack-da_DKUpgrade openoffice.org-langpack-eu_ESUpgrade autocorr-ltUpgrade openoffice.org-langpack-sk_SKUpgrade autocorr-nlUpgrade openoffice.org-math-coreUpgrade openoffice.org-langpack-urUpgrade autocorr-esUpgrade openoffice.org-langpack-cy_GBUpgrade openoffice.org-testtoolsUpgrade openoffice.org-langpack-fi_FIUpgrade openoffice.org-draw-coreUpgrade autocorr-jaUpgrade openoffice.org-ureUpgrade openoffice.org-langpack-mai_INUpgrade autocorr-fiUpgrade openoffice.org-langpack-ja_JPUpgrade openoffice.org-report-builderUpgrade openoffice.org-javafilterUpgrade openoffice.org-langpack-srUpgrade openoffice.org-rhinoUpgrade openoffice.org-langpack-pt_PTUpgrade autocorr-plUpgrade openoffice.org-langpack-xh_ZAUpgrade openoffice.org-langpack-te_INUpgrade autocorr-euUpgrade openoffice.org-impress-coreUpgrade openoffice.org-calc-coreUpgrade autocorr-csUpgrade openoffice.org-langpack-svUpgrade openoffice.org-writerUpgrade openoffice.org-langpack-th_THUpgrade openoffice.org-langpack-nb_NOUpgrade openoffice.org-presentation-minimizerUpgrade openoffice.org-langpack-af_ZAUpgrade autocorr-svUpgrade autocorr-skUpgrade openoffice.org-langpack-esUpgrade openoffice.org-langpack-ve_ZAUpgrade autocorr-ruUpgrade openoffice.org-langpack-he_ILUpgrade openoffice.org-langpack-ga_IEUpgrade autocorr-faUpgrade openoffice.org-pyunoUpgrade openoffice.org-opensymbol-fontsUpgrade autocorr-afUpgrade openoffice.org-brandUpgrade openoffice.org-langpack-zh_CNUpgrade openoffice.org-langpack-gl_ESUpgrade openoffice.org-langpack-el_GRUpgrade openoffice.org-langpack-ss_ZAUpgrade openoffice.org-langpack-tr_TRUpgrade openoffice.org-calcUpgrade openoffice.org-langpack-or_INUpgrade openoffice.org-langpack-gu_INUpgrade openoffice.org-base-coreUpgrade openoffice.org-langpack-kn_INUpgrade openoffice.org-langpack-ruUpgrade openoffice.org-emailmergeUpgrade autocorr-ptUpgrade openoffice.org-langpack-nr_ZAUpgrade openoffice.org-coreUpgrade openoffice.org-langpack-ms_MYUpgrade openoffice.org-langpack-ml_INUpgrade autocorr-huUpgrade openoffice.org-ogltransUpgrade openoffice.org-xsltfilterUpgrade broffice.org-calcUpgrade autocorr-gaUpgrade openoffice.org-langpack-cs_CZUpgrade broffice.org-baseUpgrade openoffice.org-langpack-bnUpgrade openoffice.org-develUpgrade openoffice.org-langpack-roUpgrade openoffice.org-langpack-paUpgrade broffice.org-mathUpgrade openoffice.org-langpack-lt_LTUpgrade openoffice.org-pdfimportUpgrade openoffice.org-presenter-screenUpgrade openoffice.org-langpack-ts_ZAUpgrade openoffice.org-langpack-frUpgrade autocorr-trUpgrade openoffice.org-graphicfilterUpgrade broffice.org-impressUpgrade openoffice.org-writer-coreUpgrade openoffice.org-langpack-ta_INUpgrade autocorr-vi | Oct 16, 2024 | Jan 28, 2011 |
| Redhat_linux | — | — | Jul 9, 2025 | Jan 26, 2011 |
| Suse | — | Upgrade libreoffice-kdeUpgrade libreoffice-drawUpgrade libreoffice-officebeanUpgrade libreoffice-sdkUpgrade libreoffice-writer-extensionsUpgrade libreoffice-base-extensionsUpgrade libreoffice-gnomeUpgrade libreoffice-pyunoUpgrade libreoffice-draw-extensionsUpgrade libreoffice-baseUpgrade libreoffice-impressUpgrade libreoffice-testtoolUpgrade libreoffice-filters-optionalUpgrade libreoffice-mailmergeUpgrade libreoffice-monoUpgrade libreoffice-impress-extensionsUpgrade libreofficeUpgrade libreoffice-calcUpgrade libreoffice-writerUpgrade libreoffice-base-drivers-postgresqlUpgrade libreoffice-mathUpgrade libreoffice-calc-extensionsUpgrade libreoffice-kde4Upgrade libreoffice-l10n-prebuilt | Feb 17, 2015 | Jun 28, 2013 |
| Ubuntu | — | Upgrade openoffice.org-impressUpgrade openoffice.org-coreUpgrade openoffice.org-writer | Nov 8, 2024 | Jan 28, 2011 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub