Heap-based buffer overflow in the OLE importer in OpenOffice.org before 2.4 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via an OLE file with a crafted DocumentSummaryInformation stream.
CVSS Details
- CVSS 3.1 Base Score: 8.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Apache Openoffice | — | Upgrade Apache OpenOffice to the latest version | Sep 12, 2025 | Apr 17, 2008 |
| Gentoo Linux | — | Upgrade app-office/openoffice.Upgrade app-office/openoffice-bin. | Oct 30, 2017 | Apr 17, 2008 |
| Suse | — | Upgrade OpenOffice_org-bgUpgrade OpenOffice_org-pyunoUpgrade OpenOffice_org-gnomeUpgrade OpenOffice_org-mathUpgrade OpenOffice_org-ruUpgrade OpenOffice_org-svUpgrade OpenOffice_org-filtersUpgrade OpenOffice_org-nlUpgrade OpenOffice_org-hi-INUpgrade OpenOffice_org-viUpgrade OpenOffice_org-kmUpgrade OpenOffice_org-huUpgrade OpenOffice_org-pt-BRUpgrade OpenOffice_org-arUpgrade OpenOffice_org-galleriesUpgrade OpenOffice_org-nbUpgrade OpenOffice_org-monoUpgrade OpenOffice_org-mkUpgrade OpenOffice_org-sdkUpgrade OpenOffice_org-elUpgrade OpenOffice_org-testtoolUpgrade OpenOffice_org-afUpgrade OpenOffice_org-trUpgrade OpenOffice_org-deUpgrade OpenOffice_org-daUpgrade OpenOffice_org-pa-INUpgrade OpenOffice_org-officebeanUpgrade OpenOffice_org-csUpgrade OpenOffice_org-hrUpgrade OpenOffice_org-ltUpgrade OpenOffice_org-ptUpgrade OpenOffice_org-etUpgrade OpenOffice_org-en-GBUpgrade OpenOffice_org-tsUpgrade suse-releaseUpgrade OpenOffice_org-sdk-docUpgrade OpenOffice_org-develUpgrade OpenOffice_org-cyUpgrade OpenOffice_org-esUpgrade OpenOffice_org-koUpgrade OpenOffice_org-baseUpgrade OpenOffice_org-nnUpgrade OpenOffice_org-drawUpgrade OpenOffice_org-writerUpgrade OpenOffice_orgUpgrade OpenOffice_org-zh-TWUpgrade OpenOffice_org-kdeUpgrade OpenOffice_org-xhUpgrade OpenOffice_org-jaUpgrade OpenOffice_org-plUpgrade OpenOffice_org-rwUpgrade OpenOffice_org-skUpgrade OpenOffice_org-be-BYUpgrade OpenOffice_org-fiUpgrade OpenOffice_org-sr-CSUpgrade OpenOffice_org-slUpgrade OpenOffice_org-caUpgrade OpenOffice_org-impressUpgrade OpenOffice_org-itUpgrade OpenOffice_org-zh-CNUpgrade OpenOffice_org-zuUpgrade OpenOffice_org-stUpgrade OpenOffice_org-frUpgrade OpenOffice_org-calcUpgrade OpenOffice_org-gu-INUpgrade OpenOffice_org-mailmerge | Feb 17, 2015 | Apr 17, 2008 |
| Ubuntu | — | Upgrade openoffice.org2-baseUpgrade openoffice.org-coreUpgrade libhsqldb-java | Nov 8, 2024 | Apr 17, 2008 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub