OP
Product
Openoffice
16
CVEs
0
On KEV
–
Max CVSS
0
New 30D
Severity mix
Critical 0High 0Medium 0Low 0
Watch
Add Openoffice to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2008-2366 | – | Jun 16 | Untrusted search path vulnerability in a certain Red Hat build script for OpenOffice.org (OOo) 1.1.x on Red Hat Enterprise Linux (RHEL) 3 and 4 allows local users to gain… Affected: 1.1 |
| CVE-2007-5745 | – | Apr 17 | Multiple heap-based buffer overflows in OpenOffice.org before 2.4 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a Quattro Pro… Affected: through 2.3.1 |
| CVE-2007-4575 | – | Dec 6 | HSQLDB before 1.8.0.9, as used in OpenOffice.org (OOo) 2 before 2.3.1, allows user-assisted remote attackers to execute arbitrary Java code via crafted database documents, related… Affected: through 2.3; 2.0.1; 2.0.2; 2.0.3; 2.0.3_1; 2.0.4; +4 more |
| CVE-2007-4251 | – | Aug 8 | OpenOffice.org (OOo) 2.2 does not properly handle files with multiple extensions, which allows user-assisted remote attackers to cause a denial of service Affected: 2.2 |
| CVE-2007-0245 | – | Jun 12 | Heap-based buffer overflow in OpenOffice.org (OOo) 2.2.1 and earlier allows remote attackers to execute arbitrary code via a RTF file with a crafted prtdata tag with a length… Affected: through 2.2.1 |
| CVE-2007-0238 | – | Mar 21 | Stack-based buffer overflow in filter\starcalc\scflt.cxx in the StarCalc parser in OpenOffice.org (OOo) Office Suite before 2.2, and 1.x before 1.1.5 Patch, allows user-assisted… Affected: All versions, or not specified |
| CVE-2007-0239 | – | Mar 21 | OpenOffice.org (OOo) Office Suite allows user-assisted remote attackers to execute arbitrary commands via shell metacharacters in a prepared link in a crafted document Affected: All versions, or not specified |
| CVE-2006-5870 | – | Dec 31 | Multiple integer overflows in OpenOffice.org (OOo) 2.0.4 and earlier, and possibly other versions before 2.1.0; and StarOffice 6 through 8; allow user-assisted remote attackers to… Affected: through 2.0.4 |
| CVE-2006-6628 | – | Dec 18 | Integer overflow in OpenOffice.org (OOo) 2.1 allows user-assisted remote attackers to cause a denial of service (application crash) via a crafted DOC file, as demonstrated by the… Affected: 2.1 |
| CVE-2006-3117 | – | Jun 30 | Heap-based buffer overflow in OpenOffice.org (aka StarOffice) 1.1.x up to 1.1.5 and 2.0.x before 2.0.3 allows user-assisted attackers to execute arbitrary code via a crafted… Affected: 1.1.0; 1.1.1; 1.1.2; 1.1.3; 1.1.4; 2.0; +3 more |
| CVE-2006-2199 | – | Jun 30 | Unspecified vulnerability in Java Applets in OpenOffice.org 1.1.x (aka StarOffice) up to 1.1.5 and 2.0.x before 2.0.3 allows user-assisted attackers to escape the Java sandbox and… Affected: 1.1.0; 1.1.1; 1.1.2; 1.1.3; 1.1.4; 1.1.5; +3 more |
| CVE-2006-2198 | – | Jun 30 | OpenOffice.org (aka StarOffice) 1.1.x up to 1.1.5 and 2.0.x before 2.0.3 allows user-assisted attackers to conduct unauthorized activities via an OpenOffice document with a… Affected: 1.1.0; 1.1.1; 1.1.1a; 1.1.1b; 1.1.2; 1.1.3; +16 more |
| CVE-2005-4636 | – | Dec 31 | OpenOffice.org 2.0 and earlier, when hyperlinks has been disabled, does not prevent the user from clicking the WWW-browser button in the Hyperlink dialog, which makes it easier… Affected: 1.0.1; 1.0.2; 1.1.0; 1.1.1; 1.1.2; 1.1.3; +3 more |
| CVE-2005-0941 | – | May 2 | The StgCompObjStream::Load function in OpenOffice.org OpenOffice 1.1.4 and earlier allocates memory based on 16 bit length values, but process memory using 32 bit values, which… Affected: 1.0.1; 1.0.2; 1.1.0; 1.1.1; 1.1.2; 1.1.3; +1 more |
| CVE-2004-0752 | – | Oct 20 | OpenOffice (OOo) 1.1.2 creates predictable directory names with insecure permissions during startup, which may allow local users to read or list files of other users Affected: 1.1.2 |
| CVE-2002-2210 | – | Dec 31 | The installation of OpenOffice 1.0.1 allows local users to overwrite files and possibly gain privileges via a symlink attack on the USERNAME_autoresponse.conf temporary file Affected: 1.0.1 |
Showing 16