Apache Openoffice.org vulnerabilities

4 CVEs affecting Apache Openoffice.org, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2012-2149, published 2012-06-21.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2012-1149, published 2012-06-21. High severity, CVSS 7.5. EPSS: 14.2% chance of exploitation in the next 30 days. Integer overflow in the vclmi.dll module in OpenOffice.org (OOo) 3.3, 3.4 Beta, and possibly earlier, and LibreOffice before 3.5.3, allows remote attackers to cause a denial of service (application…
CVE-2012-2149, published 2012-06-21. High severity, CVSS 7.5. EPSS: 13.8% chance of exploitation in the next 30 days. The WPXContentListener::_closeTableRow function in WPXContentListener.cpp in libwpd 0.8.8, as used by OpenOffice.org (OOo) before 3.4, allows remote attackers to execute arbitrary code via a crafted…
CVE-2012-2334, published 2012-06-19. Medium severity, CVSS 6.8. EPSS: 13.5% chance of exploitation in the next 30 days. Integer overflow in filter/source/msfilter/msdffimp.cxx in OpenOffice.org (OOo) 3.3, 3.4 Beta, and possibly earlier, and LibreOffice before 3.5.3, allows remote attackers to cause a denial of service…
CVE-2009-3569, published 2009-10-06. High severity, CVSS 9.3. EPSS: 9.8% chance of exploitation in the next 30 days. Stack-based buffer overflow in OpenOffice.org (OOo) allows remote attackers to execute arbitrary code via unspecified vectors, as demonstrated by a certain module in VulnDisco Pack Professional 8.8,…