Sun Staroffice vulnerabilities

10 CVEs affecting Sun Staroffice, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2007-2834, published 2007-09-18.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2007-2834, published 2007-09-18. High severity, CVSS 9.3. EPSS: 12% chance of exploitation in the next 30 days. Integer overflow in the TIFF parser in OpenOffice.org (OOo) before 2.3; and Sun StarOffice 6, 7, and 8 Office Suite (StarSuite); allows remote attackers to execute arbitrary code via a TIFF file with…
CVE-2006-5870, published 2006-12-31. High severity, CVSS 9.3. EPSS: 8.5% chance of exploitation in the next 30 days. Multiple integer overflows in OpenOffice.org (OOo) 2.0.4 and earlier, and possibly other versions before 2.1.0; and StarOffice 6 through 8; allow user-assisted remote attackers to execute arbitrary…
CVE-2000-0174, published 2000-03-09. Medium severity, CVSS 5.0. EPSS: 5.9% chance of exploitation in the next 30 days. StarOffice StarScheduler web server allows remote attackers to read arbitrary files via a .. (dot dot) attack.
CVE-2006-3117, published 2006-06-30. High severity, CVSS 7.6. EPSS: 4.3% chance of exploitation in the next 30 days. Heap-based buffer overflow in OpenOffice.org (aka StarOffice) 1.1.x up to 1.1.5 and 2.0.x before 2.0.3 allows user-assisted attackers to execute arbitrary code via a crafted OpenOffice XML document…
CVE-2006-2198, published 2006-06-30. High severity, CVSS 7.6. EPSS: 3.5% chance of exploitation in the next 30 days. OpenOffice.org (aka StarOffice) 1.1.x up to 1.1.5 and 2.0.x before 2.0.3 allows user-assisted attackers to conduct unauthorized activities via an OpenOffice document with a malicious BASIC macro,…
CVE-2006-2199, published 2006-06-30. High severity, CVSS 7.6. EPSS: 3.5% chance of exploitation in the next 30 days. Unspecified vulnerability in Java Applets in OpenOffice.org 1.1.x (aka StarOffice) up to 1.1.5 and 2.0.x before 2.0.3 allows user-assisted attackers to escape the Java sandbox and conduct…
CVE-2006-5201, published 2006-10-10. Medium severity, CVSS 4.0. EPSS: 3.4% chance of exploitation in the next 30 days. Multiple packages on Sun Solaris, including (1) NSS; (2) Java JDK and JRE 5.0 Update 8 and earlier, SDK and JRE 1.4.x up to 1.4.2_12, and SDK and JRE 1.3.x up to 1.3.1_19; (3) JSSE 1.0.3_03 and…
CVE-2000-0175, published 2000-03-09. High severity, CVSS 10.0. EPSS: 2.4% chance of exploitation in the next 30 days. Buffer overflow in StarOffice StarScheduler web server allows remote attackers to gain root access via a long GET command.
CVE-2000-1156, published 2001-01-09. Low severity, CVSS 3.6. EPSS: 0.5% chance of exploitation in the next 30 days. StarOffice 5.2 follows symlinks and sets world-readable permissions for the /tmp/soffice.tmp directory, which allows a local user to read files of the user who is using StarOffice.
CVE-2000-0291, published 2000-04-16. Medium severity, CVSS 4.6. EPSS: 0.4% chance of exploitation in the next 30 days. Buffer overflow in Star Office 5.1 allows attackers to cause a denial of service by embedding a long URL within a document.