Integer overflow in the XPMReader::ReadXPM function in filter.vcl/ixpm/svt_xpmread.cxx in OpenOffice.org (OOo) before 3.2 allows remote attackers to execute arbitrary code via a crafted XPM file that triggers a heap-based buffer overflow.
CVSS Details
- CVSS 3.1 Base Score: 8.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Apache Openoffice | — | Upgrade Apache OpenOffice to the latest version | Sep 12, 2025 | Feb 16, 2010 |
| Centos_linux | — | Upgrade openoffice.org-baseUpgrade openoffice.org-langpack-gu_INUpgrade openoffice.org-langpack-nlUpgrade openoffice.org-testtoolsUpgrade openoffice.org-pyunoUpgrade openoffice.org-langpack-cy_GBUpgrade openoffice.org-langpack-arUpgrade openoffice.org-langpack-da_DKUpgrade openoffice.org-langpack-ml_INUpgrade openoffice.org-langpack-deUpgrade openoffice.org-langpack-hi_INUpgrade openoffice.org-langpack-xh_ZAUpgrade openoffice.org-langpack-zh_TWUpgrade openoffice.org-langpack-or_INUpgrade openoffice.org-langpack-frUpgrade openoffice.org-writerUpgrade openoffice.org-langpack-et_EEUpgrade openoffice.org-langpack-ss_ZAUpgrade openoffice.org-langpack-hu_HUUpgrade openoffice.org-langpack-tr_TRUpgrade openoffice.org-drawUpgrade openoffice.org-sdkUpgrade openoffice.org-langpack-cs_CZUpgrade openoffice.org-langpack-he_ILUpgrade openoffice.org-langpack-pa_INUpgrade openoffice.org-langpack-ga_IEUpgrade openoffice.org-langpack-nr_ZAUpgrade openoffice.org-langpack-nb_NOUpgrade openoffice.org-langpack-kn_INUpgrade openoffice.org-langpack-ve_ZAUpgrade openoffice.org-langpack-th_THUpgrade openoffice.org-langpack-st_ZAUpgrade openoffice.org-langpack-zh_CNUpgrade openoffice.org-langpack-ts_ZAUpgrade openoffice.org-xsltfilterUpgrade openoffice.org-javafilterUpgrade openoffice.org-langpack-fi_FIUpgrade openoffice.org-langpack-esUpgrade openoffice.org-emailmergeUpgrade openoffice.org-langpack-ca_ESUpgrade openoffice.org-langpack-nso_ZAUpgrade openoffice.org-langpack-ms_MYUpgrade openoffice.org-libsUpgrade openoffice.org-impressUpgrade openoffice.org-langpack-pl_PLUpgrade openoffice.org-langpack-af_ZAUpgrade openoffice.org-i18nUpgrade openoffice.org-coreUpgrade openoffice.org-langpack-ja_JPUpgrade openoffice.orgUpgrade openoffice.org-langpack-eu_ESUpgrade openoffice.org-headlessUpgrade openoffice.org-langpack-el_GRUpgrade openoffice.org-langpack-ta_INUpgrade openoffice.org-langpack-te_INUpgrade openoffice.org-langpack-ko_KRUpgrade openoffice.org-langpack-bg_BGUpgrade openoffice.org-langpack-urUpgrade openoffice.org-langpack-lt_LTUpgrade openoffice.org-langpack-bnUpgrade openoffice.org-langpack-svUpgrade openoffice.org-langpack-as_INUpgrade openoffice.org-langpack-hr_HRUpgrade openoffice.org-mathUpgrade openoffice.org-langpack-nn_NOUpgrade openoffice.org-sdk-docUpgrade openoffice.org-langpack-pt_BRUpgrade openoffice.org-langpack-itUpgrade openoffice.org-langpack-sr_CSUpgrade openoffice.org-langpack-tn_ZAUpgrade openoffice.org-langpack-mr_INUpgrade openoffice.org-calcUpgrade openoffice.org-langpack-ruUpgrade openoffice.org-langpack-gl_ESUpgrade openoffice.org-langpack-zu_ZAUpgrade openoffice.org-graphicfilterUpgrade openoffice.org-langpack-sl_SIUpgrade openoffice.org-langpack-pt_PT | Dec 1, 2016 | Feb 16, 2010 |
| Freebsd | — | Upgrade openoffice.org | Dec 10, 2025 | Feb 25, 2010 |
| Gentoo Linux | — | Upgrade app-office/libreoffice.Upgrade app-office/libreoffice-bin.Upgrade app-office/openoffice-bin.Upgrade app-office/openoffice. | Oct 30, 2017 | Feb 16, 2010 |
| Suse | — | Upgrade OpenOffice_org-libs-extern-develUpgrade OpenOffice_org-zuUpgrade OpenOffice_org-esUpgrade OpenOffice_org-officebeanUpgrade OpenOffice_org-caUpgrade OpenOffice_org-jaUpgrade OpenOffice_org-nlUpgrade OpenOffice_org-icon-themes-prebuiltUpgrade OpenOffice_org-xhUpgrade OpenOffice_org-libs-guiUpgrade OpenOffice_org-sdkUpgrade OpenOffice_org-plUpgrade OpenOffice_org-hi-INUpgrade OpenOffice_org-gnomeUpgrade OpenOffice_org-itUpgrade OpenOffice_org-ruUpgrade OpenOffice_org-svUpgrade OpenOffice_org-libs-core-develUpgrade OpenOffice_org-monoUpgrade OpenOffice_org-pt-BRUpgrade OpenOffice_org-libs-core-l10n-prebuiltUpgrade OpenOffice_org-components-l10n-prebuiltUpgrade OpenOffice_org-galleriesUpgrade OpenOffice_org-filtersUpgrade OpenOffice_org-branding-upstreamUpgrade OpenOffice_org-mailmergeUpgrade OpenOffice_org-zh-CNUpgrade OpenOffice_org-nbUpgrade OpenOffice_org-deUpgrade OpenOffice_org-components-develUpgrade OpenOffice_org-drawUpgrade OpenOffice_org-nnUpgrade OpenOffice_org-testtoolUpgrade OpenOffice_org-zh-TWUpgrade OpenOffice_org-libs-externUpgrade OpenOffice_org-kde4Upgrade OpenOffice_org-writer-develUpgrade OpenOffice_org-afUpgrade OpenOffice_org-mathUpgrade OpenOffice_org-base-drivers-postgresqlUpgrade OpenOffice_orgUpgrade OpenOffice_org-skUpgrade OpenOffice_org-libs-extern-l10n-prebuiltUpgrade OpenOffice_org-csUpgrade OpenOffice_org-pyunoUpgrade OpenOffice_org-develUpgrade OpenOffice_org-fiUpgrade OpenOffice_org-huUpgrade OpenOffice_org-impressUpgrade OpenOffice_org-gu-INUpgrade OpenOffice_org-calcUpgrade OpenOffice_org-baseUpgrade OpenOffice_org-arUpgrade OpenOffice_org-libs-gui-l10n-prebuiltUpgrade OpenOffice_org-libs-gui-develUpgrade OpenOffice_org-libs-coreUpgrade OpenOffice_org-kdeUpgrade OpenOffice_org-componentsUpgrade OpenOffice_org-writer-l10n-prebuiltUpgrade OpenOffice_org-daUpgrade OpenOffice_org-nldUpgrade OpenOffice_org-frUpgrade OpenOffice_org-writerUpgrade OpenOffice_org-sdk-doc | Feb 17, 2015 | Feb 16, 2010 |
| Ubuntu | — | Upgrade openoffice.org-core | Nov 8, 2024 | Feb 16, 2010 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub