Stack-based buffer overflow in filter\starcalc\scflt.cxx in the StarCalc parser in OpenOffice.org (OOo) Office Suite before 2.2, and 1.x before 1.1.5 Patch, allows user-assisted remote attackers to execute arbitrary code via a document with a long Note.
CVSS Details
- CVSS 3.1 Base Score: 8.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Apache Openoffice | — | Upgrade Apache OpenOffice to the latest version | Sep 12, 2025 | Mar 21, 2007 |
| Gentoo Linux | — | Upgrade app-office/openoffice-bin.Upgrade app-office/openoffice. | Oct 30, 2017 | Mar 21, 2007 |
| Suse | — | Upgrade libreoffice-monoUpgrade libreoffice-baseUpgrade libreoffice-testtoolUpgrade libreoffice-draw-extensionsUpgrade libreoffice-impress-extensionsUpgrade libreoffice-drawUpgrade libreoffice-pyunoUpgrade libreoffice-filters-optionalUpgrade libreoffice-l10n-prebuiltUpgrade libreoffice-base-extensionsUpgrade libreoffice-mailmergeUpgrade libreoffice-writer-extensionsUpgrade libreofficeUpgrade libreoffice-impressUpgrade libreoffice-calc-extensionsUpgrade libreoffice-sdkUpgrade libreoffice-calcUpgrade libreoffice-gnomeUpgrade libreoffice-mathUpgrade libreoffice-officebeanUpgrade libreoffice-kde4Upgrade libreoffice-base-drivers-postgresqlUpgrade libreoffice-kdeUpgrade libreoffice-writer | Feb 17, 2015 | Jun 27, 2013 |
| Ubuntu | — | Upgrade openoffice.org2-baseUpgrade openoffice.org-calcUpgrade openoffice.org-coreUpgrade openoffice.org2-coreUpgrade openoffice.org2-calcUpgrade ia32-libs-openoffice.org | Nov 8, 2024 | Mar 21, 2007 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub