Heap-based buffer overflow in the OLE importer in OpenOffice.org before 2.4 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via an OLE file with a crafted DocumentSummaryInformation stream.
CVSS Details
- CVSS 3.1 Base Score: 8.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Apache Openoffice | — | Upgrade Apache OpenOffice to the latest version | Sep 12, 2025 | Apr 17, 2008 |
| Gentoo Linux | — | Upgrade app-office/openoffice-bin.Upgrade app-office/openoffice. | Oct 30, 2017 | Apr 17, 2008 |
| Suse | — | Upgrade OpenOffice_org-huUpgrade OpenOffice_org-officebeanUpgrade OpenOffice_org-elUpgrade OpenOffice_org-viUpgrade OpenOffice_org-monoUpgrade OpenOffice_org-mathUpgrade OpenOffice_org-gnomeUpgrade OpenOffice_org-sdkUpgrade OpenOffice_org-pt-BRUpgrade OpenOffice_org-nlUpgrade OpenOffice_org-ruUpgrade OpenOffice_org-pa-INUpgrade OpenOffice_org-pyunoUpgrade OpenOffice_org-hi-INUpgrade OpenOffice_org-svUpgrade OpenOffice_org-bgUpgrade OpenOffice_org-galleriesUpgrade OpenOffice_org-arUpgrade OpenOffice_org-daUpgrade OpenOffice_org-filtersUpgrade OpenOffice_org-afUpgrade OpenOffice_org-mkUpgrade OpenOffice_org-testtoolUpgrade OpenOffice_org-deUpgrade OpenOffice_org-kmUpgrade OpenOffice_org-nbUpgrade OpenOffice_org-trUpgrade OpenOffice_org-zh-CNUpgrade OpenOffice_org-xhUpgrade OpenOffice_org-impressUpgrade OpenOffice_org-gu-INUpgrade OpenOffice_org-sdk-docUpgrade OpenOffice_org-nnUpgrade OpenOffice_org-fiUpgrade OpenOffice_org-hrUpgrade OpenOffice_org-rwUpgrade OpenOffice_org-be-BYUpgrade OpenOffice_org-csUpgrade OpenOffice_org-develUpgrade OpenOffice_org-zuUpgrade OpenOffice_org-writerUpgrade OpenOffice_org-mailmergeUpgrade OpenOffice_org-caUpgrade OpenOffice_org-slUpgrade OpenOffice_org-esUpgrade OpenOffice_org-sr-CSUpgrade OpenOffice_org-drawUpgrade OpenOffice_org-calcUpgrade suse-releaseUpgrade OpenOffice_org-tsUpgrade OpenOffice_org-kdeUpgrade OpenOffice_org-cyUpgrade OpenOffice_orgUpgrade OpenOffice_org-zh-TWUpgrade OpenOffice_org-plUpgrade OpenOffice_org-koUpgrade OpenOffice_org-frUpgrade OpenOffice_org-etUpgrade OpenOffice_org-ltUpgrade OpenOffice_org-baseUpgrade OpenOffice_org-en-GBUpgrade OpenOffice_org-skUpgrade OpenOffice_org-jaUpgrade OpenOffice_org-stUpgrade OpenOffice_org-ptUpgrade OpenOffice_org-it | Feb 17, 2015 | Apr 17, 2008 |
| Ubuntu | — | Upgrade libhsqldb-javaUpgrade openoffice.org-coreUpgrade openoffice.org2-base | Nov 8, 2024 | Apr 17, 2008 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub