Stack-based buffer overflow in filter\starcalc\scflt.cxx in the StarCalc parser in OpenOffice.org (OOo) Office Suite before 2.2, and 1.x before 1.1.5 Patch, allows user-assisted remote attackers to execute arbitrary code via a document with a long Note.
CVSS Details
- CVSS 3.1 Base Score: 8.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Apache Openoffice | — | Upgrade Apache OpenOffice to the latest version | Sep 12, 2025 | Mar 21, 2007 |
| Gentoo Linux | — | Upgrade app-office/openoffice.Upgrade app-office/openoffice-bin. | Oct 30, 2017 | Mar 21, 2007 |
| Suse | — | Upgrade libreoffice-base-drivers-postgresqlUpgrade libreoffice-gnomeUpgrade libreoffice-mathUpgrade libreoffice-writerUpgrade libreoffice-officebeanUpgrade libreofficeUpgrade libreoffice-impressUpgrade libreoffice-calcUpgrade libreoffice-kdeUpgrade libreoffice-calc-extensionsUpgrade libreoffice-sdkUpgrade libreoffice-kde4Upgrade libreoffice-l10n-prebuiltUpgrade libreoffice-writer-extensionsUpgrade libreoffice-filters-optionalUpgrade libreoffice-baseUpgrade libreoffice-drawUpgrade libreoffice-mailmergeUpgrade libreoffice-pyunoUpgrade libreoffice-impress-extensionsUpgrade libreoffice-base-extensionsUpgrade libreoffice-monoUpgrade libreoffice-testtoolUpgrade libreoffice-draw-extensions | Feb 17, 2015 | Jun 27, 2013 |
| Ubuntu | — | Upgrade openoffice.org-calcUpgrade openoffice.org-coreUpgrade openoffice.org2-baseUpgrade openoffice.org2-coreUpgrade openoffice.org2-calcUpgrade ia32-libs-openoffice.org | Nov 8, 2024 | Mar 21, 2007 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub