
CVE-2005-0941
https://notcve.org/view.php?id=CVE-2005-0941
12 Apr 2005 — The StgCompObjStream::Load function in OpenOffice.org OpenOffice 1.1.4 and earlier allocates memory based on 16 bit length values, but process memory using 32 bit values, which allows remote attackers to cause a denial of service and possibly execute arbitrary code via a DOC document with certain length values, which leads to a heap-based buffer overflow. • http://secunia.com/advisories/17027 •

CVE-2002-2210
https://notcve.org/view.php?id=CVE-2002-2210
31 Dec 2002 — The installation of OpenOffice 1.0.1 allows local users to overwrite files and possibly gain privileges via a symlink attack on the USERNAME_autoresponse.conf temporary file. • http://archives.neohapsis.com/archives/bugtraq/2002-10/0161.html •