Heap-based buffer overflow in OpenOffice.org (OOo) 2.2.1 and earlier allows remote attackers to execute arbitrary code via a RTF file with a crafted prtdata tag with a length parameter inconsistency, which causes vtable entries to be overwritten.
CVSS Details
- CVSS 3.1 Base Score: 7.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Apache Openoffice | — | Upgrade Apache OpenOffice to the latest version | Sep 12, 2025 | Jun 12, 2007 |
| Gentoo Linux | — | Upgrade app-office/openoffice-bin.Upgrade app-office/openoffice. | Oct 30, 2017 | Jun 12, 2007 |
| Suse | — | Upgrade OpenOffice_org-gu-INUpgrade OpenOffice_org-pt-BRUpgrade OpenOffice_org-deUpgrade OpenOffice_org-csUpgrade OpenOffice_org-gnomeUpgrade OpenOffice_org-galleriesUpgrade OpenOffice_org-jaUpgrade OpenOffice_org-nnUpgrade OpenOffice_org-afUpgrade OpenOffice_org-ruUpgrade OpenOffice_org-caUpgrade OpenOffice_org-nlUpgrade OpenOffice_org-zh-CNUpgrade OpenOffice_org-hi-INUpgrade OpenOffice_org-frUpgrade OpenOffice_org-zuUpgrade OpenOffice_org-zh-TWUpgrade OpenOffice_org-xhUpgrade OpenOffice_org-svUpgrade OpenOffice_org-plUpgrade OpenOffice_org-itUpgrade OpenOffice_org-fiUpgrade OpenOffice_orgUpgrade OpenOffice_org-arUpgrade OpenOffice_org-nbUpgrade OpenOffice_org-skUpgrade OpenOffice_org-huUpgrade OpenOffice_org-monoUpgrade OpenOffice_org-daUpgrade OpenOffice_org-kdeUpgrade OpenOffice_org-esUpgrade OpenOffice_org-officebeanUpgrade suse-release | Feb 17, 2015 | Jun 12, 2007 |
| Ubuntu | — | Upgrade openoffice.org-coreUpgrade openoffice.org2-base | Nov 8, 2024 | Jun 12, 2007 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub