Page 5 of 42 results (0.002 seconds)

CVSS: 9.8EPSS: 2%CPEs: 7EXPL: 0

12 Apr 2005 — The StgCompObjStream::Load function in OpenOffice.org OpenOffice 1.1.4 and earlier allocates memory based on 16 bit length values, but process memory using 32 bit values, which allows remote attackers to cause a denial of service and possibly execute arbitrary code via a DOC document with certain length values, which leads to a heap-based buffer overflow. • http://secunia.com/advisories/17027 •

CVSS: 7.8EPSS: 0%CPEs: 1EXPL: 1

31 Dec 2002 — The installation of OpenOffice 1.0.1 allows local users to overwrite files and possibly gain privileges via a symlink attack on the USERNAME_autoresponse.conf temporary file. • http://archives.neohapsis.com/archives/bugtraq/2002-10/0161.html •