Multiple heap-based buffer overflows in OpenOffice.org before 2.4 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a Quattro Pro (QPRO) file with crafted (1) Attribute and (2) Font Description records.
CVSS Details
- CVSS 3.1 Base Score: 7.3
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Apache Openoffice | — | Upgrade Apache OpenOffice to the latest version | Sep 12, 2025 | Apr 17, 2008 |
| Gentoo Linux | — | Upgrade app-office/openoffice-bin.Upgrade app-office/openoffice. | Oct 30, 2017 | Apr 17, 2008 |
| Suse | — | Upgrade OpenOffice_org-svUpgrade OpenOffice_org-gu-INUpgrade OpenOffice_org-etUpgrade OpenOffice_org-impressUpgrade OpenOffice_org-drawUpgrade OpenOffice_orgUpgrade OpenOffice_org-en-GBUpgrade OpenOffice_org-writerUpgrade OpenOffice_org-nnUpgrade OpenOffice_org-cyUpgrade OpenOffice_org-sr-CSUpgrade OpenOffice_org-frUpgrade OpenOffice_org-ruUpgrade OpenOffice_org-itUpgrade OpenOffice_org-caUpgrade OpenOffice_org-hrUpgrade OpenOffice_org-kdeUpgrade OpenOffice_org-zh-CNUpgrade OpenOffice_org-fiUpgrade OpenOffice_org-zh-TWUpgrade OpenOffice_org-esUpgrade OpenOffice_org-zuUpgrade OpenOffice_org-sdk-docUpgrade OpenOffice_org-jaUpgrade OpenOffice_org-baseUpgrade OpenOffice_org-calcUpgrade OpenOffice_org-skUpgrade OpenOffice_org-pt-BRUpgrade OpenOffice_org-rwUpgrade OpenOffice_org-daUpgrade OpenOffice_org-csUpgrade OpenOffice_org-tsUpgrade OpenOffice_org-slUpgrade OpenOffice_org-be-BYUpgrade suse-releaseUpgrade OpenOffice_org-gnomeUpgrade OpenOffice_org-ltUpgrade OpenOffice_org-stUpgrade OpenOffice_org-plUpgrade OpenOffice_org-xhUpgrade OpenOffice_org-huUpgrade OpenOffice_org-officebeanUpgrade OpenOffice_org-kmUpgrade OpenOffice_org-trUpgrade OpenOffice_org-hi-INUpgrade OpenOffice_org-testtoolUpgrade OpenOffice_org-elUpgrade OpenOffice_org-nbUpgrade OpenOffice_org-koUpgrade OpenOffice_org-sdkUpgrade OpenOffice_org-deUpgrade OpenOffice_org-monoUpgrade OpenOffice_org-galleriesUpgrade OpenOffice_org-afUpgrade OpenOffice_org-arUpgrade OpenOffice_org-filtersUpgrade OpenOffice_org-pyunoUpgrade OpenOffice_org-develUpgrade OpenOffice_org-pa-INUpgrade OpenOffice_org-mkUpgrade OpenOffice_org-mathUpgrade OpenOffice_org-nlUpgrade OpenOffice_org-viUpgrade OpenOffice_org-mailmergeUpgrade OpenOffice_org-ptUpgrade OpenOffice_org-bg | Feb 17, 2015 | Apr 17, 2008 |
| Ubuntu | — | Upgrade openoffice.org2-baseUpgrade libhsqldb-javaUpgrade openoffice.org-core | Nov 8, 2024 | Apr 17, 2008 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub