The Free and Open Productivity Suite

General links

• Donating Funds
• Mailing Lists
• Report a Bug
• What's New
• Project Guidelines
• Licenses

Search

Advanced search

Google search

How do I...

• Sitemap
• FAQ
• Get help?

start:

OpenOffice.org Security Team Bulletin

Fixed in OpenOffice.org 3.1.1

• CVE-2009-0200 / CVE-2009-0201: Manipulated Microsoft Word files can lead to heap overflows and arbitrary code execution
• CVE-2009-2414 / CVE-2009-2416: Manipulated XML documents can lead to arbitrary code execution

Fixed in OpenOffice.org 3.1

• No security vulnerabilities fixed in this release

Fixed in OpenOffice.org 3.0.1

• No security vulnerabilities fixed in this release

Fixed in OpenOffice.org 3.0

• No security vulnerabilities fixed in this release

Fixed in OpenOffice.org 2.4.3

• CVE-2009-0200 / CVE-2009-0201: Manipulated Microsoft Word files can lead to heap overflows and arbitrary code execution
• CVE-2009-2414 / CVE-2009-2416: Manipulated XML documents can lead to arbitrary code execution

Fixed in OpenOffice.org 2.4.2

• CVE-2008-2237: Manipulated WMF files can lead to heap overflows and arbitrary code execution
• CVE-2008-2238: Manipulated EMF files can lead to heap overflows and arbitrary code execution

Fixed in OpenOffice.org 2.4.1

• CVE-2008-2152: Different kinds of manipulated files may lead to heap overflows and arbitrary code execution

Fixed in OpenOffice.org 2.4

• CVE-2007-4770/4771: Manipulated ODF text documents containing XForms can lead to heap overflows and arbitrary code execution
• CVE-2007-5745/5747: Manipulated Quattro Pro files can lead to heap overflows and arbitrary code execution
• CVE-2007-5746: Manipulated EMF files can lead to heap overflows and arbitrary code execution
• CVE-2008-0320: Manipulated OLE files can lead to heap overflows and arbitrary code execution

Fixed in OpenOffice.org 2.3.1

• CVE-2007-4575: Potential arbitrary code execution vulnerability in 3rd party module (HSQLDB)

Fixed in OpenOffice.org 2.3

• CVE-2007-2834: Manipulated TIFF files can lead to heap overflows and arbitrary code execution

Fixed in OpenOffice.org 2.2.1

• CVE-2007-2754: Integer overflow and heap-based buffer overflow vulnerability in 3rd party module (freetype)
• CVE-2007-0245: Manipulated RTF files can lead to heap overflows and arbitrary code execution

Fixed in OpenOffice.org 2.2

• CVE-2007-0239: URL Handling Security Vulnerability (Linux/Solaris)
• CVE-2007-0238: StarCalc Vulnerability
• CVE-2007-002: WordPerfect Import Vulnerability

Fixed in OpenOffice.org 2.1

• CVE-2006-5870: WMF/EMF Processing Failures

Fixed in OpenOffice.org 2.0.3

• CVE-2006-2199: Java Applets
• CVE-2006-2198: Macro
• CVE-2006-3117: File Format

---

Security Home -> Bulletin