CVE-2008-0320: Openoffice Openoffice.org

High severity, CVSS 9.3. EPSS: 56.9% chance of exploitation in the next 30 days.

Heap-based buffer overflow in the OLE importer in OpenOffice.org before 2.4 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via an OLE file with a crafted DocumentSummaryInformation stream.

Affected products

• Openoffice Openoffice.org: up to and including 2.3.1; version 2.0.3 only; version 2.1 only; version 2.2 only; version 2.2.1 only; version 2.3 only

Published 2008-04-17. Last modified 2026-06-16.