Sun Openoffice.org vulnerabilities

5 CVEs affecting Sun Openoffice.org, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2012-4233, published 2012-11-19.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2009-2139, published 2009-09-08. High severity, CVSS 9.3. EPSS: 6.5% chance of exploitation in the next 30 days. Heap-based buffer overflow in svtools/source/filter.vcl/wmf/enhwmf.cxx in Go-oo 2.x and 3.x before 3.0.1, previously named ooo-build and related to OpenOffice.org (OOo), allows remote attackers to…
CVE-2007-5747, published 2008-04-17. Medium severity, CVSS 6.8. EPSS: 4.1% chance of exploitation in the next 30 days. Integer underflow in OpenOffice.org before 2.4 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a Quattro Pro (QPRO) file with crafted values that…
CVE-2012-4233, published 2012-11-19. Medium severity, CVSS 4.3. EPSS: 3.5% chance of exploitation in the next 30 days. LibreOffice 3.5.x before 3.5.7.2 and 3.6.x before 3.6.1, and OpenOffice.org (OOo), allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted (1) odt file to…
CVE-2011-2713, published 2011-10-21. Medium severity, CVSS 4.3. EPSS: 2.9% chance of exploitation in the next 30 days. oowriter in OpenOffice.org 3.3.0 and LibreOffice before 3.4.3 allows user-assisted remote attackers to cause a denial of service (crash) via a crafted DOC file that triggers an out-of-bounds read in…
CVE-2009-2416, published 2009-08-11. Medium severity, CVSS 6.5. EPSS: 2% chance of exploitation in the next 30 days. Multiple use-after-free vulnerabilities in libxml2 2.5.10, 2.6.16, 2.6.26, 2.6.27, and 2.6.32, and libxml 1.8.17, allow context-dependent attackers to cause a denial of service (application crash)…