CVE-2008-2238: Openoffice Openoffice.org

High severity, CVSS 9.3. EPSS: 6.7% chance of exploitation in the next 30 days.

Multiple integer overflows in OpenOffice.org (OOo) 2.x before 2.4.2 allow remote attackers to execute arbitrary code via crafted EMR records in an EMF file associated with a StarOffice/StarSuite document, which trigger a heap-based buffer overflow.

Affected products

• Openoffice Openoffice.org: any version; up to and including 2.4.1; version 2.0 only; version 2.0.2 only; version 2.0.3 only; version 2.0.4 only; …

Published 2008-10-30. Last modified 2026-06-16.