OP
Vendor
Openoffice
30
CVEs
0
On KEV
0
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2010-2936 | OP Openoffice.org Openoffice | – | Aug 25 | Integer overflow in simpress.bin in the Impress module in OpenOffice.org (OOo) 2.x and 3.x before 3.3 allows remote attackers to cause a denial of service (application crash) or… |
| CVE-2010-2935 | OP Openoffice.org Openoffice | – | Aug 25 | simpress.bin in the Impress module in OpenOffice.org (OOo) 2.x and 3.x before 3.3 does not properly handle integer values associated with dictionary property items, which allows… |
| CVE-2009-3571 | OP Openoffice.org Openoffice | – | Oct 6 | Unspecified vulnerability in OpenOffice.org (OOo) has unknown impact and client-side attack vector, as demonstrated by a certain module in VulnDisco Pack Professional 8.8, aka… |
| CVE-2009-3570 | OP Openoffice.org Openoffice | – | Oct 6 | Unspecified vulnerability in OpenOffice.org (OOo) has unspecified impact and remote attack vectors, as demonstrated by a certain module in VulnDisco Pack Professional 8.9 |
| CVE-2009-0201 | OP Openoffice.org Openoffice | – | Sep 2 | Heap-based buffer overflow in OpenOffice.org (OOo) before 3.1.1 and StarOffice/StarSuite 7, 8, and 9 might allow remote attackers to execute arbitrary code via unspecified records… |
| CVE-2009-0200 | OP Openoffice.org Openoffice | – | Sep 2 | Integer underflow in OpenOffice.org (OOo) before 3.1.1 and StarOffice/StarSuite 7, 8, and 9 might allow remote attackers to execute arbitrary code via crafted records in the… |
| CVE-2009-0259 | OP Openoffice.org Openoffice | – | Jan 22 | The Word processor in OpenOffice.org 1.1.2 through 1.1.5 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted (1) .doc,… |
| CVE-2008-4937 | OP Openoffice.org Openoffice | – | Nov 5 | senddoc in OpenOffice.org (OOo) 2.4.1 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/log.obr.##### temporary file |
| CVE-2008-2238 | OP Openoffice.org Openoffice | – | Oct 30 | Multiple integer overflows in OpenOffice.org (OOo) 2.x before 2.4.2 allow remote attackers to execute arbitrary code via crafted EMR records in an EMF file associated with a… |
| CVE-2008-2237 | OP Openoffice.org Openoffice | – | Oct 30 | Heap-based buffer overflow in OpenOffice.org (OOo) 2.x before 2.4.2 allows remote attackers to execute arbitrary code via a crafted WMF file associated with a StarOffice/StarSuite… |
| CVE-2008-3437 | OP Openoffice.org Openoffice | – | Aug 1 | OpenOffice.org (OOo) before 2.1.0 does not properly verify the authenticity of updates, which allows man-in-the-middle attackers to execute arbitrary code via a Trojan horse… |
| CVE-2008-2366 | OP Openoffice Openoffice | – | Jun 16 | Untrusted search path vulnerability in a certain Red Hat build script for OpenOffice.org (OOo) 1.1.x on Red Hat Enterprise Linux (RHEL) 3 and 4 allows local users to gain… |
| CVE-2008-2152 | OP Openoffice.org Openoffice | – | Jun 10 | Integer overflow in the rtl_allocateMemory function in sal/rtl/source/alloc_global.c in OpenOffice.org (OOo) 2.0 through 2.4 allows remote attackers to execute arbitrary code via… |
| CVE-2007-5746 | OP Openoffice.org Openoffice | – | Apr 17 | Integer overflow in OpenOffice.org before 2.4 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via an EMF file with a crafted… |
| CVE-2007-5745 | OP Openoffice Openoffice | – | Apr 17 | Multiple heap-based buffer overflows in OpenOffice.org before 2.4 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a Quattro Pro… |
| CVE-2008-0320 | OP Openoffice.org Openoffice | – | Apr 17 | Heap-based buffer overflow in the OLE importer in OpenOffice.org before 2.4 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via an… |
| CVE-2007-4575 | OP Openoffice Openoffice | – | Dec 6 | HSQLDB before 1.8.0.9, as used in OpenOffice.org (OOo) 2 before 2.3.1, allows user-assisted remote attackers to execute arbitrary Java code via crafted database documents, related… |
| CVE-2007-4251 | OP Openoffice Openoffice | – | Aug 8 | OpenOffice.org (OOo) 2.2 does not properly handle files with multiple extensions, which allows user-assisted remote attackers to cause a denial of service |
| CVE-2007-0245 | OP Openoffice Openoffice | – | Jun 12 | Heap-based buffer overflow in OpenOffice.org (OOo) 2.2.1 and earlier allows remote attackers to execute arbitrary code via a RTF file with a crafted prtdata tag with a length… |
| CVE-2007-0239 | OP Openoffice Openoffice | – | Mar 21 | OpenOffice.org (OOo) Office Suite allows user-assisted remote attackers to execute arbitrary commands via shell metacharacters in a prepared link in a crafted document |
| CVE-2007-0238 | OP Openoffice Openoffice | – | Mar 21 | Stack-based buffer overflow in filter\starcalc\scflt.cxx in the StarCalc parser in OpenOffice.org (OOo) Office Suite before 2.2, and 1.x before 1.1.5 Patch, allows user-assisted… |
| CVE-2006-5870 | OP Openoffice Openoffice | – | Dec 31 | Multiple integer overflows in OpenOffice.org (OOo) 2.0.4 and earlier, and possibly other versions before 2.1.0; and StarOffice 6 through 8; allow user-assisted remote attackers to… |
| CVE-2006-6628 | OP Openoffice Openoffice | – | Dec 18 | Integer overflow in OpenOffice.org (OOo) 2.1 allows user-assisted remote attackers to cause a denial of service (application crash) via a crafted DOC file, as demonstrated by the… |
| CVE-2006-2199 | OP Openoffice Openoffice | – | Jun 30 | Unspecified vulnerability in Java Applets in OpenOffice.org 1.1.x (aka StarOffice) up to 1.1.5 and 2.0.x before 2.0.3 allows user-assisted attackers to escape the Java sandbox and… |
| CVE-2006-3117 | OP Openoffice Openoffice | – | Jun 30 | Heap-based buffer overflow in OpenOffice.org (aka StarOffice) 1.1.x up to 1.1.5 and 2.0.x before 2.0.3 allows user-assisted attackers to execute arbitrary code via a crafted… |
| CVE-2006-2198 | OP Openoffice Openoffice | – | Jun 30 | OpenOffice.org (aka StarOffice) 1.1.x up to 1.1.5 and 2.0.x before 2.0.3 allows user-assisted attackers to conduct unauthorized activities via an OpenOffice document with a… |
| CVE-2005-4636 | OP Openoffice Openoffice | – | Dec 31 | OpenOffice.org 2.0 and earlier, when hyperlinks has been disabled, does not prevent the user from clicking the WWW-browser button in the Hyperlink dialog, which makes it easier… |
| CVE-2005-0941 | OP Openoffice Openoffice | – | May 2 | The StgCompObjStream::Load function in OpenOffice.org OpenOffice 1.1.4 and earlier allocates memory based on 16 bit length values, but process memory using 32 bit values, which… |
| CVE-2004-0752 | OP Openoffice Openoffice | – | Oct 20 | OpenOffice (OOo) 1.1.2 creates predictable directory names with insecure permissions during startup, which may allow local users to read or list files of other users |
| CVE-2002-2210 | OP Openoffice Openoffice | – | Dec 31 | The installation of OpenOffice 1.0.1 allows local users to overwrite files and possibly gain privileges via a symlink attack on the USERNAME_autoresponse.conf temporary file |
