Integer underflow in OpenOffice.org (OOo) before 3.1.1 and StarOffice/StarSuite 7, 8, and 9 might allow remote attackers to execute arbitrary code via crafted records in the document table of a Word document, leading to a heap-based buffer overflow.
2009-09-02T17:30:00.577
2025-04-09T00:30:58.490
Deferred
CVSSv2: 9.3 (HIGH)
AV:N/AC:M/Au:N/C:C/I:C/A:C
8.6
10.0
| Type | Vendor | Product | Version/Range | Vulnerable? |
|---|---|---|---|---|
| Application | openoffice | openoffice.org | ≤ 3.1 | Yes |
| Application | openoffice | openoffice.org | 1.0-ru | Yes |
| Application | openoffice | openoffice.org | 1.0.0 | Yes |
| Application | openoffice | openoffice.org | 1.0.1 | Yes |
| Application | openoffice | openoffice.org | 1.0.2 | Yes |
| Application | openoffice | openoffice.org | 1.0.3.1 | Yes |
| Application | openoffice | openoffice.org | 1.1 | Yes |
| Application | openoffice | openoffice.org | 1.1 | Yes |
| Application | openoffice | openoffice.org | 1.1 | Yes |
| Application | openoffice | openoffice.org | 1.1 | Yes |
| Application | openoffice | openoffice.org | 1.1 | Yes |
| Application | openoffice | openoffice.org | 1.1.1 | Yes |
| Application | openoffice | openoffice.org | 1.1.2 | Yes |
| Application | openoffice | openoffice.org | 1.1.3 | Yes |
| Application | openoffice | openoffice.org | 1.1.4 | Yes |
| Application | openoffice | openoffice.org | 1.1.5 | Yes |
| Application | openoffice | openoffice.org | 1.9.84 | Yes |
| Application | openoffice | openoffice.org | 1.9.87 | Yes |
| Application | openoffice | openoffice.org | 1.9.91 | Yes |
| Application | openoffice | openoffice.org | 1.9.93 | Yes |
| Application | openoffice | openoffice.org | 1.9.95 | Yes |
| Application | openoffice | openoffice.org | 1.9.100 | Yes |
| Application | openoffice | openoffice.org | 1.9.104 | Yes |
| Application | openoffice | openoffice.org | 1.9.113 | Yes |
| Application | openoffice | openoffice.org | 1.9.118 | Yes |
| Application | openoffice | openoffice.org | 1.9.122 | Yes |
| Application | openoffice | openoffice.org | 1.9.130 | Yes |
| Application | openoffice | openoffice.org | 1.9.156 | Yes |
| Application | openoffice | openoffice.org | 1.9.680 | Yes |
| Application | openoffice | openoffice.org | 2.0 | Yes |
| Application | openoffice | openoffice.org | 2.0 | Yes |
| Application | openoffice | openoffice.org | 2.0.1 | Yes |
| Application | openoffice | openoffice.org | 2.0.2 | Yes |
| Application | openoffice | openoffice.org | 2.0.2 | Yes |
| Application | openoffice | openoffice.org | 2.0.2 | Yes |
| Application | openoffice | openoffice.org | 2.0.3 | Yes |
| Application | openoffice | openoffice.org | 2.0.4 | Yes |
| Application | openoffice | openoffice.org | 2.1 | Yes |
| Application | openoffice | openoffice.org | 2.1.152 | Yes |
| Application | openoffice | openoffice.org | 2.1.154 | Yes |
| Application | openoffice | openoffice.org | 2.2 | Yes |
| Application | openoffice | openoffice.org | 2.2.1 | Yes |
| Application | openoffice | openoffice.org | 2.3 | Yes |
| Application | openoffice | openoffice.org | 2.3.1 | Yes |
| Application | openoffice | openoffice.org | 2.4 | Yes |
| Application | openoffice | openoffice.org | 2.4.1 | Yes |
| Application | openoffice | openoffice.org | 2.4.1 | Yes |
| Application | openoffice | openoffice.org | 3.01 | Yes |
| Application | openoffice | openoffice.org | 605b | Yes |
| Application | openoffice | openoffice.org | 609 | Yes |
| Application | openoffice | openoffice.org | 614 | Yes |
| Application | openoffice | openoffice.org | 619 | Yes |
| Application | openoffice | openoffice.org | 627 | Yes |
| Application | openoffice | openoffice.org | 633 | Yes |
| Application | openoffice | openoffice.org | 638 | Yes |
| Application | openoffice | openoffice.org | 638c | Yes |
| Application | openoffice | openoffice.org | 641b | Yes |
| Application | openoffice | openoffice.org | 641d | Yes |
| Application | openoffice | openoffice.org | 643 | Yes |