CVE-2009-2139: Sun Openoffice.org

High severity, CVSS 9.3. EPSS: 6.5% chance of exploitation in the next 30 days.

Heap-based buffer overflow in svtools/source/filter.vcl/wmf/enhwmf.cxx in Go-oo 2.x and 3.x before 3.0.1, previously named ooo-build and related to OpenOffice.org (OOo), allows remote attackers to execute arbitrary code via a crafted EMF file, a similar issue to CVE-2008-2238.

Affected products

• Sun Openoffice.org: version 2.0.0 only; version 2.0.3 only; version 2.0.4 only; version 2.1.0 only; version 2.2.0 only; version 2.2.1 only; …

Published 2009-09-08. Last modified 2026-06-16.