Heap-based buffer overflow in OpenOffice.org (OOo) 2.2.1 and earlier allows remote attackers to execute arbitrary code via a RTF file with a crafted prtdata tag with a length parameter inconsistency, which causes vtable entries to be overwritten.
CVSS Details
- CVSS 3.1 Base Score: 7.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Apache Openoffice | — | Upgrade Apache OpenOffice to the latest version | Sep 12, 2025 | Jun 12, 2007 |
| Gentoo Linux | — | Upgrade app-office/openoffice.Upgrade app-office/openoffice-bin. | Oct 30, 2017 | Jun 12, 2007 |
| Suse | — | Upgrade OpenOffice_org-itUpgrade OpenOffice_org-zh-TWUpgrade OpenOffice_org-jaUpgrade OpenOffice_org-afUpgrade OpenOffice_org-gnomeUpgrade OpenOffice_org-nlUpgrade OpenOffice_org-plUpgrade OpenOffice_org-nnUpgrade OpenOffice_org-csUpgrade OpenOffice_org-ruUpgrade OpenOffice_org-frUpgrade OpenOffice_org-deUpgrade OpenOffice_org-svUpgrade OpenOffice_org-pt-BRUpgrade OpenOffice_org-galleriesUpgrade OpenOffice_org-gu-INUpgrade OpenOffice_org-caUpgrade OpenOffice_org-xhUpgrade OpenOffice_org-zh-CNUpgrade OpenOffice_org-zuUpgrade OpenOffice_org-hi-INUpgrade OpenOffice_org-nbUpgrade OpenOffice_orgUpgrade OpenOffice_org-huUpgrade OpenOffice_org-esUpgrade OpenOffice_org-skUpgrade OpenOffice_org-daUpgrade OpenOffice_org-fiUpgrade suse-releaseUpgrade OpenOffice_org-kdeUpgrade OpenOffice_org-arUpgrade OpenOffice_org-monoUpgrade OpenOffice_org-officebean | Feb 17, 2015 | Jun 12, 2007 |
| Ubuntu | — | Upgrade openoffice.org2-baseUpgrade openoffice.org-core | Nov 8, 2024 | Jun 12, 2007 |
Prioritize with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub